Using the ASC version.

I'm upgrading some 2.7.0.1 sensors to 2.8.2. Since the existing policies are 2.7, I couldn't copy them from the sensor and import them to add the new port variables. I tried to add the Port Variables manually in ASC IDSPM but they don't save. They appear to, but they're not there.

I deleted HTTP_PORTS from the regular Variables section and tried to recreate it in the Port Variables section, but that didn't work.

How can I create them manually in an upgrade scenario? Do I have to delete all port variables from Variables first?

Thanks,

Ray

Using ASC version 2.2.0.22

The only way I can add port variables is to copy the snort.conf file from the sensor, add the portvar into the snort.conf, do a Reset Port Variables and import them from the file.

If I do a simple Add WINS_PORT 43 it looks like it works but it never gets saved. I just tried it on a sensor that was built as 2.8 from the beginning and it won't let me add a portvar from the IDSPM GUI either. There are only five port variables.

NOT_SMTP_PORT  !25

HTTP_PORTS 80

SHELLCODE_PORTS !80

ORACLE_PORTS 1521

SSH_PORTS 22

Ray