Possible to create custom IDS (Snort) signatures?

jcgvt
Here to help

Possible to create custom IDS (Snort) signatures?

Is it possible to create custom IDS/Snort signatures on an MX84? 

4 REPLIES 4
jdsilva
Kind of a big deal

Oooh, good question. I've never seen that option anywhere... So I'm thinking no. I'm interested to see if I'm wrong.

jcgvt
Here to help

We just got our first Meraki online...very small office (30 clients). I haven't seen ANY Ids alerts yet. Any easy way to test the IDS is functioning properly? I see plenty of allowed/clean content filters checks in the vent logs, but haven't see anything from IDS yet.
PhilipDAth
Kind of a big deal
Kind of a big deal

@jcgvt you can test by trying to download the EICAR test virus.  Accessing this URL should fail if you have it set up correctly.

 

http://secure.eicar.org/eicar.com.txt

PhilipDAth
Kind of a big deal
Kind of a big deal

@jcgvt you can't create custom ISD signatures.

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels