deception mode strict

Function

The deception mode strict command enables the strict deception mode.

The undo deception mode command disables the strict deception mode.

Format

deception mode strict

undo deception mode

Parameters

None

Views

Deception view

Default Level

2: Configuration level

Usage Guidelines

By default, the strict deception mode is not used.

Fixed networking and stable servers are prerequisites for the strict deception mode. After the strict deception mode is set, the DecoySensor immediately lures the traffic destined for offline IP addresses or unopened ports to the Decoy for further detection.

In non-strict mode, deception is performed only when the following conditions are met:

The IP address or port scanning rate initiated by an IP address reaches the threshold.
An offline IP address or unopened port is scanned.

Example

# Enable the strict deception mode.

<FW> system-view
[FW] deception
[FW-deception] deception mode strict