FortiDeceptor
FortiDeceptor provides Deception-based Breach Protection to deceive, expose and eliminate external and internal threats.
cfchan
Staff
Staff
Article Id 197583

Description

 

This article describes how to download Deception VM images on FortiDeceptor v2.0. and v2.1.

There are two solutions to download Deception VM images:

  • With Internet access.
  •  Without Internet access.

 

Scope

 

FortiDeceptor version 3.X - 4.X - 5.X and 6.X


Solution

 

  • With Internet access: SSH to FortiDeceptor CLI and execute the following commands to download Windows and Linux images in the CLI:

 

> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/win7x86v1.pkg

> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/ubuntu16v1.pkg
>> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/scadav1.pkg
>> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/win10v1.pkg

Note:

Windows images do NOT  appear under GUI Deception -> Deception Images, unless the license file (.lic) contains the Windows license. Please contact the local SE/CSE to obtain the Windows license key.

Once the commands are executed, the download from the Fortinet image server and installation of packages (Deception VM) can be seen in the CLI. A ‘successfully installed’ message will be displayed once the download is finished as per the screenshot below:

 

 

 
 With the right license, the Deception VMs are available via GUI, deploy the license via Deployment Wizard in GUI.

 

  • Without Internet access: If there is no Internet access, ask the local Fortinet SE and download the Windows and Linux images, place them on SCP, TFTPor FTP server and use the following commands to download image to FortiDeceptor using CLI:

 

> fw-upgrade ?

ERROR: incorrect options
Usage: fw-upgrade -h
    -h Help information.
    -b Download an image file from this server and upgrade the firmware.
    -v Download a VM image file from this server and install.
        -t<ftp|scp> The protocol type, FTP or SCP. The default is scp.
        -s<SCP/FTP server IP address> Download an image file from this server IP address.
        -u<user name> The user name for authentication.
        -p<password> The password for authentication.
        -f<full path of filename> The full path for the image file.