Monitor Decoy & Lure Status

The Deception > Decoy & Lure Status page shows the status of the Decoys on your network.

We recommend operating Decoy VMs with the same status for expected behavior.

To view the Deception Status:

1. Go to Deception > Decoy & Lure Status.

   Action	Click View detail to see the decoy's configuration details. Click Copy to Template to duplicate the decoy as a template. Click Start or Stop to start or stop the decoy. Click Delete to delete the decoy. Click Download to download the FortiDeceptor Token Package. Click VNC to open a VNC of the decoy.
   Status	The status of the decoy can be Initializing, Running, Stopped, or Cannot Start. If the Decoy VM cannot start, hover over the VM to see the reason.
   Decoy Name	Name of the decoy.
   OS	Operating system of the decoy.
   VM	The name of the Decoy VM.
   Enabled Services	The number of decoy services enabled on this VM.
   IP	The IP address of the Decoy VM.
   Services	List of services enabled. Hover over an icon to see a text list.
   Network Type	Shows if the IP address is Static or DHCP.
   DNS	DNS of the Decoy VM.
   Gateway	Gateway of the Decoy VM.

To delete one or more Decoy VMs:

1. Go to Deception > Decoy & Lure Status.
2. Click Delete beside the Decoy VM.
3. Click OK.

To start one or more Decoy VM:

1. Go to Deception > Decoy & Lure Status.
2. Select one or more Decoy VMs that are stopped.
3. Click Start.

To stop one or more Decoy VMs:

1. Go to Deception > Decoy & Lure Status.
2. Select one or more Decoy VMs that are running.
3. Click Stop.