Look Up IPS Signatures on the Security Portal

You can look up information about IPS (Intrusion Prevention Service) signatures on the WatchGuard Security Portal at: https://securityportal.watchguard.com/Threats.

Screen shot of the IPS Security Portal

On the Security Portal — Threats page, you can:

  • See a list of all IPS signatures.
  • Search for an IPS signature by ID or name.
  • Click a signature ID to see additional information about the signature, based on Bugtraq ID, CVE ID, or other sources about the threat the signature blocks.

In Fireware v12.6.1 and higher, the IPS signature set version number is 18.x. For Fireware releases lower than v12.6.1, the signature set version number is 4.x. On the Security Portal — Threats page, from the Signature Set drop-down list, select the signature set you want to see information for.

To look up an IPS signature from Fireware Web UI, you can click a signature ID in the Signatures or Exceptions tabs in the IPS configuration page.

If you have enabled logging for IPS signatures, from Firebox System Manager you can use Traffic Monitor to find more information about the signature IDs associated with traffic log messages. When you look up signature information for a traffic log message, you see the signature information in the IPS Security Portal.

For more information, see Run Diagnostic Tasks to Learn More About Log Messages.

See Also

Show IPS Signature Information