FortiDeceptor DaaS Version 24.3
This document provides information about FortiDeceptor DaaS version 24.3 build 80.
What's new
FortiDeceptor DaaS 24.3 includes the following new features and enhancements:
Dynamic malware analysis
- FortiDeceptor DaaS supports FortiSandbox for dynamic malware analysis captured by the Deception decoys.
Network
- FortiDeceptor DaaS uses a remote EDGE device with the Layer2 tunnel for decoy connectivity. This network tunnel is a key platform component, therefore we have added an alert notification email when a remote EDGE device goes offline. In addition, we added a GUI widget that will present the tunnel's real-time status, including deployment network information, tunnel online/offline status, tunnel uptime and creation time.
Tunnel traffic encryption
- FortiDeceptor DaaS requires end users to manually copy the authentication key from the DaaS GUI to the remote EDGE device for tunnel traffic encryption. We have improved and introduced a new command tunnel that allows the remote EDGE device to download the authentication key automatically. This provides more flexibility to the DaaS admin, allowing them to refresh the tunnel encryption at any time.
Device status
- We have added a new widget to show the EDGE device status and related decoys.
Organization Units (OU)
- FortiDeceptor DaaS data view support for organization OU is now similar to the DaaS MSSP. This allows organization users to select an OU and access a specific data view page to view incidents for all accounts under that OU.
FortiCloud profiles
- The current FortiDeceptor DaaS service hosts a separate version of profile and permission control, thus requiring the user to configure the profile and permission settings on both the FortiCloud portal and DaaS service side. We have improved the user experience by allowing the end user to configure the profile settings on the FortiCloud portal side. When the end user logs in, the user settings are automatically synced to the DaaS service side.
General
- The FortiDeceptor DaaS Deployment Wizard is based on fixed GUI modules to provide service configuration interfaces for different decoy templates. We have implemented a dynamic GUI conductor with a list of configuration modules and corresponding service definitions to expand and improve the Deployment Wizard.
- We have improved the FortiDeceptor DaaS TTU component for more functionality and scalability.