38-12
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 38 Defining IPS Signatures
Configuring Signatures
You cannot edit a Default signature. Default signatures are the Cisco-defined version of a signature.
Before you can edit a Default signature, you must convert it either to a Local signature (one defined
specifically on the selected device) or a shared-policy-specific signature (one defined in a shared
policy). You must select either Local or the shared policy name from the Source Policy field before
you can change any field on the Edit Signature dialog box.
You cannot change every characteristic of a signature. For example, you cannot change the signature
or subsignature IDs. These fields are read-only.
If you want to change the detailed parameters of a signature, follow the procedure described in
Editing Signature Parameters (Tuning Signatures), page38-19.
Step 4 Click OK to save your changes.
Edit Signature or Add Custom Signature Dialog Boxes
The Edit Signature and Add Custom Signature dialog boxes are essentially the same. Most of the fields
are identical, although there are some layout differences. Use these dialog boxes as follows:
Use the Edit Signature dialog box to edit the characteristics of a non-default signature (you can only
view the characteristics of a default signature in read-only mode).
You cannot edit default signatures. To make any changes to a signature, you must select something
other than Default in the Source Policy field at the top of the dialog box.
Use the Add Custom Signature dialog box to create a custom signature. In the Add Custom
Signature dialog box, you enter a name and then select an existing engine from a drop-down list.
The signature ID and subsignature ID are assigned by Security Manager. After you finish selecting
the remaining parameters, the new signature is added to the Signatures page in the appropriate
numerical location, and it is selected.
Note Beginning with Security Manager 4.4, you can specify a signature ID and a subsignature ID while adding
a custom signature. If you specify a signatureID/subsignature ID combination that already exists, you
will receive an error message.
Navigation Path
From the Signatures page:
To edit a signature, right-click the policy you want to edit and select Edit Row.
To add a custom signature, click the Add Row (+) button beneath the table, or right-click any row
and select Add Row.
For information on opening the Signature page, see Signatures Page, page38-4.
Related Topics
Edit, Add, Replace Action Dialog Boxes, page 38-8
Edit Signature Parameters Dialog Box, page 38-21
Engine Options, page 38-17