F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Converting a Snort Rule to an AFM Protocol Inspection Custom Signature

We recently had the opportunity to demonstrate what I consider the most interesting use case for Protocol Inspection custom signatures: adapting existing Snort rules for use in AFM Protocol Inspectio...
Published Jan 11, 2021
Version 1.0
AFM
Custom Signatures
IDS
ips
Protocol Inspection
security
snort
James_Affeld's avatar
Icon for Employee rankEmployee
I've been at F5 for 13 years as of the last time I updated my profile. I focus on AFM Network Firewall, Protocol Inspection (IPS), DoS Protection, and dabble in APM and ASM.
View Profile
James_Affeld's avatar
James_Affeld
Icon for Employee rankEmployee
Dec 16, 2021

Sorry, I believe the rules syntax and matching engine are just too different in ASM / Advanced WAF.