6
.
www.fidelissecurity.com
Copyright © 2022 Fidelis Cybersecurity
®
, Inc. All rights reserved
4. Decoy Server Networking Environment
Decoy server appliances can connect to multiple networks to deploy different decoy services. Decoys can
operate whether ports are connected to:
•
Trunk ports, which enables communication on multiple subnets from the same port on the
appliance,
and/or
•
Ports directly to specific subnets
Admin Network
The Admin network connects Fidelis Decoy server to the CommandPost, and optionally to an
on-premises Fidelis Sandbox. You need one switch port per Decoy server appliance for the Admin
network.
Appliance
Switch Port Type
Qty
Decoy Server
GbE Copper RJ45 port
1
Decoy eth1, Decoy eth2, Decoy eth3
Ports to connect the Decoy server appliance to subnets through network switch directly certain subnets
and/or use trunk port.
Appliance
Switch Port Type
Qty
Decoy Server
GbE Copper RJ45 port
3
Decoy eth4, Decoy eth5, Decoy eth6, Decoy eth7 (additional ports)
Most environments using higher network throughput will use these ports. You can connect the Decoy
server to a trunk port and/or to certain subnets through the switch.
Appliance
Switch Port Type
Qty
Decoy Server 1GbE
GbE Copper RJ45 port
4
Decoy Server 10-GbE
Duplex LC Connector, 1GbE or 10GbE
2
iLO Network
Optional network for remote/out-of-band server administration. You will need on additional switch port for
each iLO connection.
Appliance
Switch Port Type
Qty
Decoy Server
GbE Copper RJ45 port
1