Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Timothy_Hall
Legend Legend
Legend

SnortConvertor Deprecated?

While the SnortConvertor binary still exists in R80.40, it doesn't seem to work right other than running "dry mode" on a prospective .rules file.  Adding and removing SNORT signatures works fine from the SmartConsole but anything other than dry mode with SnortConvertor just seems to throw errors and fail.  It also stopped appearing in the official Threat Prevention documentation around R80.20, is it deprecated?  Replaced by the API call now?

Attend my 60-minute "Be your Own TAC: Part Deux" Presentation
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
0 Kudos
1 Reply
PhoneBoy
Admin
Admin

The R80.40 docs explicitly mentions using the API/CLI: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ThreatPrevention_AdminGuide/...
That said, it's also referenced in the R80.40 GAIA CLI guide as well (SnortConvertor).
So I'm not sure if it's actually deprecated or not, but I'd be more inclined to use the API to do it.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events