Technical Documentation

Understanding Network Honeypot Operation Setting

The Network Honeypot rulebase operation setting is used to toggle the network honeypot on and off.

Specify Impersonate to turn it on; specify Ignore to turn it off.

If the Network Honeypot rulebase is turned on, an attacker attempts to connect to an impersonated port, and the rule matches, the IDP appliance responds with a TCP SYN/ACK.


Published: 2010-01-12