Cisco Systems CL-28826-01 Edit Signature or Add Custom Signature Dialog Boxes

38-12

User Guide for Cisco Security Manager 4.4

OL-28826-01

Chapter 38 Defining IPS Signatures

Configuring Signatures

•You cannot edit a Default signature. Default signatures are the Cisco-defined version of a signature.

Before you can edit a Default signature, you must convert it either to a Local signature (one defined

specifically on the selected device) or a shared-policy-specific signature (one defined in a shared

policy). You must select either Local or the shared policy name from the Source Policy field before

you can change any field on the Edit Signature dialog box.

•You cannot change every characteristic of a signature. For example, you cannot change the signature

or subsignature IDs. These fields are read-only.

•If you want to change the detailed parameters of a signature, follow the procedure described in

Editing Signature Parameters (Tuning Signatures), page38-19.

Step 4 Click OK to save your changes.

Edit Signature or Add Custom Signature Dialog Boxes

The Edit Signature and Add Custom Signature dialog boxes are essentially the same. Most of the fields

are identical, although there are some layout differences. Use these dialog boxes as follows:

•Use the Edit Signature dialog box to edit the characteristics of a non-default signature (you can only

view the characteristics of a default signature in read-only mode).

You cannot edit default signatures. To make any changes to a signature, you must select something

other than Default in the Source Policy field at the top of the dialog box.

•Use the Add Custom Signature dialog box to create a custom signature. In the Add Custom

Signature dialog box, you enter a name and then select an existing engine from a drop-down list.

The signature ID and subsignature ID are assigned by Security Manager. After you finish selecting

the remaining parameters, the new signature is added to the Signatures page in the appropriate

numerical location, and it is selected.

Note Beginning with Security Manager 4.4, you can specify a signature ID and a subsignature ID while adding

a custom signature. If you specify a signatureID/subsignature ID combination that already exists, you

will receive an error message.

Navigation Path

From the Signatures page:

•To edit a signature, right-click the policy you want to edit and select Edit Row.

•To add a custom signature, click the Add Row (+) button beneath the table, or right-click any row

and select Add Row.

For information on opening the Signature page, see Signatures Page, page38-4.