See built-in deception connect detection to protection.
Follow activity against configured decoy services, then inspect the event that changes a trusted device’s access.
What you’ll see
- See how configured decoy services identify suspicious activity.
- Distinguish a honeypot connection from the demonstrated login-event trigger.
- Review the policy reason behind the high-risk restriction.
Video walkthrough
Enable the decoy services
The administrator enables deception and selects the demonstrated SSH, Telnet and FTP services.
Review the access policy
A managed Windows endpoint has full access. A higher-priority deception-event rule can assign a high-risk role.
Observe a decoy connection
A connection to the SSH decoy produces a honeypot-hit event; this demo does not quarantine on that connection alone.
Inspect the deception response
The simulated login attempts and session closure trigger a deception event. The administrator reviews the restricted device and recorded event details.
Chapter links open the selected moment on YouTube.
Read the condensed transcript
The administrator enables EasyNAC deception and selects fake SSH, Telnet and FTP services. The demonstration distinguishes a simple connection, which can also come from a network scan, from a login attempt. A Windows endpoint starts with full access under its management trust conditions. Connecting to the SSH decoy records a honeypot hit but does not yet quarantine the device in this configuration. The simulated login attempts and session closure trigger a deception event. A higher-priority policy assigns a high-risk role and restricts the endpoint. The administrator then reviews the device’s event flags and the details recorded for the decoy interaction.
Condensed from the original demonstration for readability. This video shows an earlier EasyNAC interface. Connector requirements and available checks depend on your current release and configuration.
Try it on your network.
Start with a practical agentless NAC pilot, or talk to us about your network and security tools.