Skip to main content
lceh
New Member
December 3, 2024
Question

FortiDeceptor Cuckoo integration

  • December 3, 2024
  • 1 reply
  • 777 views

Hi everyone,

I noticed FortiDeceptor supports integration with Cuckoo Sandbox, but given that Cuckoo is no longer maintained, I have a few questions:

  1. Is anyone actively using Cuckoo (or forks like Cuckoo3) with FortiDeceptor?
  2. For those who are, what does your environment look like? What security measures have you implemented to safeguard an unmaintained Cuckoo server?
  3. Are there users here leveraging other sandboxing alternatives instead?
  4. Has Fortinet issued any official statements about continuing to support Cuckoo integrations or recommendations for alternatives?

Looking forward to hearing how others are approaching this. Thanks!

1 reply

kabudiba2
New Member
December 3, 2024

I am trying to get this going. We have Fortigates, SEIM, Analyzer and possibly SOAR licensing in our environment and not sure where I point the log collector too. I am new to Sentinel https://speedtest.vet/ .