https://community.checkpoint.com/t5/Firewall-and-Security-Management/SnortConvertor-Deprecated/m-p/128178#M18648 <P>The R80.40 docs explicitly mentions using the API/CLI:&nbsp;<A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ThreatPrevention_AdminGuide/Topics-TPG/SNORT-Signature-Support.htm?Highlight=snortconvertor" target="_blank">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ThreatPrevention_AdminGuide/Topics-TPG/SNORT-Signature-Support.htm?Highlight=snortconvertor</A><BR />That said, it's also referenced in the R80.40 GAIA CLI guide as well (SnortConvertor).<BR />So I'm not sure if it's actually deprecated or not, but I'd be more inclined to use the API to do it.</P> Thu, 26 Aug 2021 22:22:39 GMT PhoneBoy 2021-08-26T22:22:39Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SnortConvertor-Deprecated/m-p/128175#M18647 <P>While the SnortConvertor binary still exists in R80.40, it doesn't seem to work right other than running "dry mode" on a prospective .rules file.&nbsp; Adding and removing SNORT signatures works fine from the SmartConsole but anything other than dry mode with&nbsp;SnortConvertor just seems to throw errors and fail.&nbsp; It also stopped appearing in the official Threat Prevention documentation around R80.20, is it deprecated?&nbsp; Replaced by the API call now?</P> Thu, 26 Aug 2021 21:18:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SnortConvertor-Deprecated/m-p/128175#M18647 Timothy_Hall 2021-08-26T21:18:31Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/SnortConvertor-Deprecated/m-p/128178#M18648 <P>The R80.40 docs explicitly mentions using the API/CLI:&nbsp;<A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ThreatPrevention_AdminGuide/Topics-TPG/SNORT-Signature-Support.htm?Highlight=snortconvertor" target="_blank">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ThreatPrevention_AdminGuide/Topics-TPG/SNORT-Signature-Support.htm?Highlight=snortconvertor</A><BR />That said, it's also referenced in the R80.40 GAIA CLI guide as well (SnortConvertor).<BR />So I'm not sure if it's actually deprecated or not, but I'd be more inclined to use the API to do it.</P> Thu, 26 Aug 2021 22:22:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/SnortConvertor-Deprecated/m-p/128178#M18648 PhoneBoy 2021-08-26T22:22:39Z