To enable DMZ mode:
Go to command line and specify the following command:
Enabling or disabling the DMZ mode will remove all previous configurations including Deception VMs, decoys, and tokens. Deception Images will not be removed.
Limitations of the DMZ Mode
The DMZ Mode in FortiDeceptor functions like the regular mode, with the following exceptions:
- When DMZ mode is enabled, the label DMZ-MODE is shown on the top banner.
- In the Monitored Network view, Deception Monitor IP/Mask is hidden when in DMZ Mode. See Set up the Monitored Network for more information about Deception IP/Mask.
- Under Deception Status view, the Attack Test selection is disabled.
- When DMZ mode is enabled, Deception VMs are limited to 1 Deploy Interface with 16 Decoys. See Deploy Deception VMs with the Deploy Wizard for more information about IP address range.