ContentsHide

Import Snort Rules

Snort is an open-source intrusion prevention system (IPS) and help detect malicious attacks. You can convert the Snort IPS rules into Juniper IPS custom attack signatures using the Juniper Integration of Snort Tool (JIST). By default, Junos OS includes the JIST. The tool supports Snort version 2 and version 3 rules.

To import the Snort rules:

Click the CUSTOM tab on the IPS Signatures page.
Click Import Snort Rules at the upper-right corner of the Custom Signatures page.

Note:

This option is only available if you have selected Custom Attacks in the View by list.

The Import Snort Rules page appears.
Click Browse and select the file to upload the Snort rules file and click OK.

The supported file formats are: .rules, .txt, .set, and .srt

The Custom Signatures page lists the converted custom attack signatures. The unconverted rules and error log files are downloaded automatically.

Help us to improve. Rate this article.

Feedback Received. Thank You!

Need more help?

Ask questions in TechWiki

Contact Customer Support

Check documentation in TechLibrary

Rating by you:

Import Snort Rules

Help us to improve. Rate this article.

Related Documentation