Skip to main content
datalit
New Member
January 30, 2020
Question

get ips signatures list

  • January 30, 2020
  • 1 reply
  • 14023 views

Hi, I was wondering if there is a way to export ips signatures from a FortiGate to a file? I found this:

https://help.fortinet.com/fmgr/50hlp/60/6-0-2/Content/FortiManager_Admin_Guide/1000_Policy%20and%20Objects/1200_Managing%20objects/1900_Export%20signatures%20to%20CSV.htm

but I can't find that option on my FortiGate 70D. Is there a way to do that from a firewall or from the FortiGuard page https://fortiguard.com/updates/ips ? Thanks

    1 reply

    Dave_Hall
    New Member
    January 30, 2020

    Hi Michele.

     

    The help link you have posted appears to be for the FortiManager - not for Fortigate.  As far as I am aware there is no similar export feature on the Fortigate (at least on 6.0.x).  I think you may be able to get a similar IPS status list though from the CLI by typing "get ips rule status" but be prepared for a very long listing.  or just a simple list of IPS sig names: get ips rule status | grep rule-name

     

     

     

    emnoc
    New Member
    January 30, 2020

    Did you try the fortiguard IPS site? They use to have a broad  signature listing posted at one time.

     

    Ken Felix

    datalit
    datalitAuthor
    New Member
    January 31, 2020

    @Dave Hall thank you the CLI command works, anyway with the csv would be easier so I requested a demo of the FortiManager but is on cloud and I didn't find that function, I found a "Policy & Objects > Policy Package > Export to Excel" function but generates an empty file and I don't find how to update the list

    @emnoc do you mean the 2nd link I posted? Unfortunately I can't find a export function