Custom application signature - wrong name displayed in fortiview

Hi all,

I create own application signature and add to application profile, It works

But in FortiView I don't see name XXapp but see ID number in this case 1786 and category and risk information is missing.

Issue is on FG60D with 5.2.10 fw

F-SBID( --attack_id 1786; --name "XXapp"; --protocol udp; --dst_port XX; --app_cat 26; --risk 1; --pop 3;)

check attch. pict.

and attack_id was generated automatically. I did'nt add it

I add by cli set signature "F-SBID( --name "XXapp"; --protocol udp; --dst_port XX; --app_cat 26; --risk 1; --pop 3;)"

Updated:

New information> In fortianalyzer in report or fortiview The Name of custom apllication is showed coreclly !

New Member

Solved.

Under FW 5.2 till patch 10 is known(not repaired) error. Hotline support advice you should use FW 5.4 where custom apps works right.

:(

but 5.4 isn't my cup of tea

JaP

New Member

I would suggest getting familiar with 5.4

The new feature sets and visibility are worth it to me.

Not to mention the bug fixes etc

New Member

But My experience with Soho Boxies with fw 5.4 is that are slower than same boxes with 5.2

Sign up