FortiDeceptor
FortiDeceptor provides Deception-based Breach Protection to deceive, expose and eliminate external and internal threats.
cfchan
Staff
Staff
Article Id 197583
Description
This article describes how to download Deception VM images on FortiDeceptor v2.0. and v2.1.

There are two solutions to download Deception VM images:
   1) With Internet access
   2) Without Internet access

Solution
1) With Internet access:

SSH to FortiDeceptor CLI and execute the following commands to download Windows and Linux images in the CLI:

> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/win7x86v1.pkg
> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/ubuntu16v1.pkg
>> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/scadav1.pkg
>> fw-upgrade -v -tftp -sfdcvm.fortinet.net -f/FortiDeceptor/images/win10v1.pkg


Note: Windows images DOES NOT  appear under GUI Deception -> Deception Images, unless the license file (.lic) contains the Windows license. Please contact the local SE/CSE to obtain the Windows license key.

Once the commands are execute, the download from Fortinet image server and install of packages (Deception VM) can be seen in the CLI. A ‘successfully installed’ message will be displayed once the download is finished as per screenshot below:



Figure 1: Downloading of images via Fortinet image server



Figure 2: Download and install images successfully.


With the right license, the Deception VMs is available via GUI, deploy the license via Deployment Wizard in GUI.



Figure 3: Deception Images


2) Without Internet access:

If there is no Internet access, ask the local Fortinet SE and download the Windows and Linux images, place them on SCP, TFTPor FTP server and use the following commands to download image to FortiDeceptor using CLI:

> fw-upgrade ?
ERROR: incorrect options
Usage: fw-upgrade -h
    -h Help information.
    -b Download an image file from this server and upgrade the firmware.
    -v Download a VM image file from this server and install.
        -t<ftp|scp> The protocol type, FTP or SCP. The default is scp.
        -s<SCP/FTP server IP address> Download an image file from this server IP address.
        -u<user name> The user name for authentication.
        -p<password> The password for authentication.
        -f<full path of filename> The full path for the image file.





Contributors