Cisco
Login
Search

Intrusion Detection and Prevention Migrate from Snort 2 to Snort 3 How to Migrate from Snort 2 to Snort 3 Convert Snort 2 Custom IPS Rules to Snort 3 Convert all Snort 2 Custom Rules across all Intrusion Policies to Snort 3

Last updated: Aug 18, 2025

Convert all Snort 2 Custom Rules across all Intrusion Policies to Snort 3

Procedure

1

Choose Objects > Intrusion Rules .

2

Click Snort 3 All Rules tab.
3

Ensure All Rules is selected in the left pane.
4

Click the Tasks drop-down list and choose:

  • Convert Snort 2 rules and import—To automatically convert all the Snort 2 custom rules across all the intrusion policies to Snort 3 and import them into Firewall Management Center as Snort 3 custom rules.

  • Convert Snort 2 rules and download—To automatically convert all the Snort 2 custom rules across all the intrusion policies to Snort 3 and download them into your local system.
5

Click OK.


 

  • If you selected Convert and import in the previous step, then all the converted rules are saved under a newly created rule group All Snort 2 Converted Global under Local Rules.

  • If you selected Convert and download in the previous step, then save the rules file locally. You can review the converted rules in the downloaded file and later upload them by following the steps in Add Custom Rules to Rule Groups.

Refer to the video Converting Snort 2 Rules to Snort 3 for additional support and information.

What to do next

Deploy configuration changes; see Deploy Configuration Changes.

Previous topic Convert Snort 2 Custom IPS Rules to Snort 3 Next topic Convert Snort 2 Custom Rules of a Single Intrusion Policy to Snort 3