Custom application signature - wrong name displayed in fortiview

[JakubP]

Hi all,

I create own application signature and add to application profile, It works

But in FortiView I don't see name XXapp but see ID number in this case 1786 and category and risk information is missing.

Issue is on FG60D with 5.2.10 fw

F-SBID( --attack_id 1786; --name "XXapp"; --protocol udp; --dst_port XX; --app_cat 26; --risk 1; --pop 3;)

check attch. pict.

and attack_id was generated automatically. I did'nt add it

I add by cli set signature "F-SBID(  --name "XXapp"; --protocol udp; --dst_port XX; --app_cat 26; --risk 1; --pop 3;)"

Updated:

New information> In fortianalyzer in report or fortiview The Name of custom apllication is showed coreclly !

[JakubP]

Solved.

Under FW 5.2 till patch 10 is known(not repaired) error. Hotline support advice you should use FW 5.4 where custom apps works right.

:(

but 5.4 isn't my cup of tea

JaP

[MikePruett]

I would suggest getting familiar with 5.4

The new feature sets and visibility are worth it to me.

Not to mention the bug fixes etc

[JakubP]

But My experience with Soho Boxies with fw 5.4 is that are slower than same boxes with 5.2