Demo mode
The purpose of demo mode is to showcase FortiNDR GUI functionality without actual malware or scanning capabilities. Demo mode will generate malware log entries (but not the actual malware) to populate the GUI with different attack scenarios, and allow you to try demo searching, logging and MITRE/JSON/IOC reporting functionalities.
Demo mode requires less computer resources and can run on newer laptops such as those with 2–4 vCPU and 8GB memory. For production, a minimum of 16 vCPUs and 32GB of memory is required.
If required, please contact the Fortinet sales team for an evaluation license. A licensed FortiNDR instance allows you to load ANN and have full scanning capabilities. Scanning capabilities including manual upload requires you to satisfy minimum production CPU and memory requirements (which is 16vCPU and 32GB of memory).
|
Demo Mode is only available on FortiNDR VM. |
To turn on demo mode with the CLI:
execute demo on
|
|
Do not use functions which require scanning, such as Sniffer or Manual Upload, while in Demo Mode. |
To exit demo mode with the CLI:
execute demo off
To erase the demo log with the CLI:
execute db restore