The FortiDeceptor platform includes the following components:
- The FortiDeceptor management console manages and operates the whole platform including deployment, configuration, alerting, analysis, and ECO system integration.
FortiDeceptor offers a highly-scalable three-tier architecture that combines three levels of deception:
- Server / endpoint lures.
- Medium interaction decoys (IoT / OT).
- High interaction decoys.
You can deploy deception lures using existing infrastructure tools such as A/D GPO, MS SCCM, and so on.
A single FortiDeceptor appliance can run up to 16 deception VMs that support a total of 256 IP addresses. Each IP address represents a single decoy.
You can download a deception VM from the FortiDeceptor marketplace. You can also allow the end user admin bring their own gold image and convert it to a decoy using the FortiDeceptor decoy customization wizard.