Technical Tip: Customized IPS signature with same attack ID across different VDOMs
Description
This article describes how to summarize the same customized signature with same attack ID.
Solution
When multiple VDOMs are enable, sometimes user will want to summarize the same customized signature with same attack ID.
This is not supported. You cannot create custom signature with same attack_id in two or more different VDOMs in FortiOS.
1) Use a different attack ID in the customized signature across the VDOMs.
2) Leave the attack ID as blank and FortiOS will assigned a random Attack ID to the signature.
This article describes how to summarize the same customized signature with same attack ID.
Solution
When multiple VDOMs are enable, sometimes user will want to summarize the same customized signature with same attack ID.
This is not supported. You cannot create custom signature with same attack_id in two or more different VDOMs in FortiOS.
# config ips customExample: if same attack ID 1001 in the First VDOM is happening and adding another one into Second VDOM is wanted, get the following:
edit "TestSignature"
set signature "F-SBID(--attack_id 1001; --name \”TestSignature......
…
next
TestSignature: custom signature id ‘1001’ is in useSolution.
object set operator error, -2 discard the setting
Command fail. Return code 1
1) Use a different attack ID in the customized signature across the VDOMs.
2) Leave the attack ID as blank and FortiOS will assigned a random Attack ID to the signature.
# config ips custom
edit "TestSignature"
set signature "F-SBID(--name \”TestSignature......
…
next
