Creating Custom Signatures - Enterasys Intrusion Prevention System Manual

Creating Custom Signatures

16. Modified before or after: You can filter based on the date the signature was modified. Select
either before or after, then enter the date in yyy-mm-dd format, or click the Choose button to
display a calendar from which you can select a date.
17. Enabled or Disabled: You can filter signatures in a library based on whether they are enabled
or disabled.
18. Basic or Extended: You can filter signatures in a library based on whether they contain only
basic properties (Basic) or whether they can have extended properties (Extended).
19. Click OK. The filtered list of signatures is displayed in the Signature Library Properties
panel.
20. Click View to view the properties of any of the displayed signatures.
21. Select the desired signatures and click Copy to Library to add them to your custom library.
Creating Custom Signatures
Once you have created a custom signature library, you can create completely new signatures
within that library, and you can edit signatures that have already been added to the library.
To create or edit custom signatures:
1. Click the Network Policy View icon, then click the Signature Libraries tab and expand the
Master Libraries and/or Custom Libraries lists.
3-12 Creating Network Sensor Signatures