Set up the Deployment Network

The Deployment Network page allows administrators to set up a monitoring interface into a VLAN or a subnet.

To add a VLAN or subnet to FortiDeceptor:

Select Deception > Deployment Network.
Select Auto VLAN Detection to automatically detect the VLANs on your network. Auto VLAN detection allows FortiDeceptor to detect the available VLANs on the deployment network interface and display them in the GUI. You can select and add the VLANs for the deployment of Decoys later.
Select the Detection Interface. You can select multiple ports from Port 2 to Port 8. Click OK.

Click Add New VLAN/Subnet to manually add a VLAN or a subnet to FortiDeceptor. Configure the following settings:

Interface	The port that will connect to the VLAN or subnet.
VLAN ID	Specify an integer to assign a unique ID to the VLAN.
Deception Monitor IP/Mask	Specify an IP address to monitor. This is useful to mask the actual IP address.
Ref	Shows the number of objects referring to this object.
Status	Shows if the IP address is initialized.
Action	Click Edit to edit the VLAN or Subnet entry. The Edit button is visible only after the entry is saved.

Click Save.

The Monitor IP/Mask must be set as an IP address and not as a subnet.

You must use the following guidelines to set the Monitored IP/Mask:

Interface name and VLAN ID is unique among all Monitored IP/Mask.
If VLAN ID is 0, the Monitored IP/Mask is unique among all the Monitored IP/Mask without VLAN and all system interfaces.
If VLAN is not 0, the Monitored IP/Mask is unique among all subnets in the same VLAN.

Set up the Deployment Network

The Deployment Network page allows administrators to set up a monitoring interface into a VLAN or a subnet.

To add a VLAN or subnet to FortiDeceptor:

Select Deception > Deployment Network.

Select Auto VLAN Detection to automatically detect the VLANs on your network. Auto VLAN detection allows FortiDeceptor to detect the available VLANs on the deployment network interface and display them in the GUI. You can select and add the VLANs for the deployment of Decoys later.

Select the Detection Interface. You can select multiple ports from Port 2 to Port 8. Click OK.

Click Add New VLAN/Subnet to manually add a VLAN or a subnet to FortiDeceptor. Configure the following settings:

Interface	The port that will connect to the VLAN or subnet.
VLAN ID	Specify an integer to assign a unique ID to the VLAN.
Deception Monitor IP/Mask	Specify an IP address to monitor. This is useful to mask the actual IP address.
Ref	Shows the number of objects referring to this object.
Status	Shows if the IP address is initialized.
Action	Click Edit to edit the VLAN or Subnet entry. The Edit button is visible only after the entry is saved.

Click Save.

The Monitor IP/Mask must be set as an IP address and not as a subnet.

You must use the following guidelines to set the Monitored IP/Mask:

Interface name and VLAN ID is unique among all Monitored IP/Mask.
If VLAN ID is 0, the Monitored IP/Mask is unique among all the Monitored IP/Mask without VLAN and all system interfaces.
If VLAN is not 0, the Monitored IP/Mask is unique among all subnets in the same VLAN.

Administration Guide

Set up the Deployment Network