DMZ Mode
Deploy a FortiDeceptor hardware unit or VM in the Demilitarized Zone (DMZ) network. Attacks on the DMZ network can be monitored when FortiDeceptor is installed in the DMZ network.
To enable DMZ mode:
Go to the command line and specify the following command:
dmz-mode enable
|
Enabling or disabling the DMZ mode will remove all previous configurations including Decoy VMs, lures, and tokens. Deception OS will not be removed.
|
Limitations of the DMZ Mode
The DMZ Mode in FortiDeceptor functions like the regular mode, with the following exceptions:
- When DMZ mode is enabled, the label DMZ-MODE is shown on the top banner.
- In the Deployment Network view, Deception Monitor IP/Mask is hidden when in DMZ Mode. See Set up the Deployment Network for more information about Deception IP/Mask.
- Under Deception Status view, the Attack Test selection is disabled.
- When DMZ mode is enabled, Decoy VMs are limited to 1 Deploy Interface. See Deploy Decoy VMs with the Deployment Wizard for more information about IP address range.