Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Lure Resources

Use the Lure Resources page to view the current lure, upload resources such as Word and PDF files to automatically generate lures, and import a user name list from an LDAP server.

Uploading lure resources

Upload a lure resource to automatically generate lures. There are two types of lure resource

  • Documents: Word and PDF files that generate authentic directories and files over the Decoy network shares.
  • Credential: Username (with password) list files that generate authentic credentials access to the network Decoys.
To upload a lure resource:
  1. Go to Deception > Lure Resources.
  2. Click Upload. The Upload New Lure Resource dialog opens.
  3. From the Lure Type dropdown, select the lure type.

    • Credential - Fake Users (txt): Upload a list file with fake users and passwords.
    • Documents - Template (doc,docx,pdf,zip): Upload files as a template. FortiDeceptor will insert content to build honey docs.
    • Documents - Fake Content (zip): Upload files directly to FortiDeceptor.

    Tooltip

    The Credential - Fake Users (txt) and Documents - Template (doc,docx,pdf,zip) options include sample files to help you create a resource.

  4. Enter an optional Tag, such as any.
  5. In the Resource File field, click Choose a file to upload the resource, or drag and drop it onto the field.
  6. Click Save.

Importing users from LDAP

To import an LDAP user list:
  1. Go to Deception > Lure Resources.
  2. Click Import Users from LDAP.
  3. Configure the import settings.

    Version Select the version from the dropdown.
    Bind DN Username used to connect to the LDAP service on the specified LDAP Server.
    LDAP URL

    Enter the LDAP URL using the following format:

    [protocol///]host[:port][/basedn[?attribute,...][?scope][?filter]]

    Bind Password Enter the Bind DN's password.
    CA Certificates Select a certificate from the dropdown.
    Search Limit Search sub-tree depth.
    TCP Timeout Enter the TCP connection timeout in seconds.
    Search Timeout Enter the search timeout in seconds.
    SASL Bind User The username to authenticate a DN on the directory server using SASL.
    SASL Bind Mechanism The username and password for authentication.

    Tag

    Enter a tag for the import.

  4. Click Save.

Examples: Import Users from LDAP

Open LDAP example:

"dn": "uid=test,o=org,dc=example,dc=com",

"url": "ldap://192.168.0.100/o=org,dc=example,dc=com?uid?sub?(objectclass=*)",

"password": "password"

Windows AD example:

"version": "3",

"dn": "cn=users,cn=usergroup,dc=example,dc=com",

"url": "ldap:192.168.0.100/cn=usergroup,dc=example,dc=com?sAMAccountName?sub?(objectClass=user)",

"password": "password"

Support is offered if the format of the tree can parse uid/sAMAccountName in the search results. Ensure the URL queries the proper data.

Lure Resources

Use the Lure Resources page to view the current lure, upload resources such as Word and PDF files to automatically generate lures, and import a user name list from an LDAP server.

Uploading lure resources

Upload a lure resource to automatically generate lures. There are two types of lure resource

  • Documents: Word and PDF files that generate authentic directories and files over the Decoy network shares.
  • Credential: Username (with password) list files that generate authentic credentials access to the network Decoys.
To upload a lure resource:
  1. Go to Deception > Lure Resources.
  2. Click Upload. The Upload New Lure Resource dialog opens.
  3. From the Lure Type dropdown, select the lure type.

    • Credential - Fake Users (txt): Upload a list file with fake users and passwords.
    • Documents - Template (doc,docx,pdf,zip): Upload files as a template. FortiDeceptor will insert content to build honey docs.
    • Documents - Fake Content (zip): Upload files directly to FortiDeceptor.

    Tooltip

    The Credential - Fake Users (txt) and Documents - Template (doc,docx,pdf,zip) options include sample files to help you create a resource.

  4. Enter an optional Tag, such as any.
  5. In the Resource File field, click Choose a file to upload the resource, or drag and drop it onto the field.
  6. Click Save.

Importing users from LDAP

To import an LDAP user list:
  1. Go to Deception > Lure Resources.
  2. Click Import Users from LDAP.
  3. Configure the import settings.

    Version Select the version from the dropdown.
    Bind DN Username used to connect to the LDAP service on the specified LDAP Server.
    LDAP URL

    Enter the LDAP URL using the following format:

    [protocol///]host[:port][/basedn[?attribute,...][?scope][?filter]]

    Bind Password Enter the Bind DN's password.
    CA Certificates Select a certificate from the dropdown.
    Search Limit Search sub-tree depth.
    TCP Timeout Enter the TCP connection timeout in seconds.
    Search Timeout Enter the search timeout in seconds.
    SASL Bind User The username to authenticate a DN on the directory server using SASL.
    SASL Bind Mechanism The username and password for authentication.

    Tag

    Enter a tag for the import.

  4. Click Save.

Examples: Import Users from LDAP

Open LDAP example:

"dn": "uid=test,o=org,dc=example,dc=com",

"url": "ldap://192.168.0.100/o=org,dc=example,dc=com?uid?sub?(objectclass=*)",

"password": "password"

Windows AD example:

"version": "3",

"dn": "cn=users,cn=usergroup,dc=example,dc=com",

"url": "ldap:192.168.0.100/cn=usergroup,dc=example,dc=com?sAMAccountName?sub?(objectClass=user)",

"password": "password"

Support is offered if the format of the tree can parse uid/sAMAccountName in the search results. Ensure the URL queries the proper data.