For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JustCooLpOOLe's avatar
JustCooLpOOLe
Icon for Cirrocumulus rankCirrocumulus
Feb 08, 2022

YARA and SNORT Conversion to ASM/AWAF Custom Signatures

Hi, Does anyone have any links or knowledge around converting YARA and/or SNORT rules into ASM/AWAF custom signatures?  Using 15.1.5 at the moment but was curious if this has been successful.  I've ...
security
CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Feb 14, 2022

Hi, there's a section in "Attack Signatures" database menu that allows you to create default WAF signatures. From "Advanced" options you can use SNORT syntax as well. 

I'm going by memory, but it should be something like  Security/Options/Application Security/Attack Singatures/Attack Signature List , then "create". (from the environents I manage I see that this menu keeps changing position in major versions ... hope I'm right ðŸ˜„ )