Possible to create custom IDS (Snort) signatures?

[jcgvt]

Is it possible to create custom IDS/Snort signatures on an MX84? 

[jdsilva]

Oooh, good question. I've never seen that option anywhere... So I'm thinking no. I'm interested to see if I'm wrong.

[jcgvt]

We just got our first Meraki online...very small office (30 clients). I haven't seen ANY Ids alerts yet. Any easy way to test the IDS is functioning properly? I see plenty of allowed/clean content filters checks in the vent logs, but haven't see anything from IDS yet.

[PhilipDAth]

@jcgvt you can test by trying to download the EICAR test virus.  Accessing this URL should fail if you have it set up correctly.

http://secure.eicar.org/eicar.com.txt

[PhilipDAth]

@jcgvt you can't create custom ISD signatures.