Fortinet black logo

Administration Guide

Applying the license in an offline or air-gapped network

Applying the license in an offline or air-gapped network

To download the FortiDeceptor license file from the Fortinet support site:
  1. Log into Customer Service and Support. The Asset Portal opens.
  2. Go to My Assets and locate the device then click the Serial Number. The product details page opens.
  3. In the License & Key widget, click Get The License File and save it to the local disk.
To upload the license file to FortiDeceptor:
  1. Log into FortiDeceptor.
  2. Configure the management IP address on port1.
  3. In the Dashboard System Information widget, click Upload License beside Firmware License.

  4. Locate the license and click Submit.

FortiDeceptor extracts the serial number, IP addresses, decoy keys, expiry date; and then performs the following verifications.

  • Verify the expiration time of the license.
  • Verify that the embedded management IP address is the same as the current management IP address. You can view the IP address in the Product Information widget in the product details page.
  • Verify the expiration time of the decoys keys if the keys are subscription type.

If all the verifications pass, the unit is ready to import deception images.

Note
  • FortiDeceptor decoy WCF lookup (any URLs visiting from decoys) are not categorized.
    • You can use FortiManager to resolve this. Because FortiDeceptor supports override FDS server, you can enter the FortiManager IP address there.
  • Subscription-based decoys, that is, SSL VPN Windows customization, is in the *.lic file from the support site, which you can run offline.
  • FortiDeceptor Custom Decoy Subscription Service includes:
    • FC-10-FDCVM-292-02-DD (for VM).
    • FC-10-FDC1K-292-02-DD (for HW).

Applying the license in an offline or air-gapped network

To download the FortiDeceptor license file from the Fortinet support site:
  1. Log into Customer Service and Support. The Asset Portal opens.
  2. Go to My Assets and locate the device then click the Serial Number. The product details page opens.
  3. In the License & Key widget, click Get The License File and save it to the local disk.
To upload the license file to FortiDeceptor:
  1. Log into FortiDeceptor.
  2. Configure the management IP address on port1.
  3. In the Dashboard System Information widget, click Upload License beside Firmware License.

  4. Locate the license and click Submit.

FortiDeceptor extracts the serial number, IP addresses, decoy keys, expiry date; and then performs the following verifications.

  • Verify the expiration time of the license.
  • Verify that the embedded management IP address is the same as the current management IP address. You can view the IP address in the Product Information widget in the product details page.
  • Verify the expiration time of the decoys keys if the keys are subscription type.

If all the verifications pass, the unit is ready to import deception images.

Note
  • FortiDeceptor decoy WCF lookup (any URLs visiting from decoys) are not categorized.
    • You can use FortiManager to resolve this. Because FortiDeceptor supports override FDS server, you can enter the FortiManager IP address there.
  • Subscription-based decoys, that is, SSL VPN Windows customization, is in the *.lic file from the support site, which you can run offline.
  • FortiDeceptor Custom Decoy Subscription Service includes:
    • FC-10-FDCVM-292-02-DD (for VM).
    • FC-10-FDC1K-292-02-DD (for HW).