Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Shlomi_Feldman
Employee Alumnus
Employee Alumnus

Industrial Control Systems honeypot

Hi Checkmates,

This time I want to share with you a useful tool for ICS/IOT security.

Conpot is a low interactive server side Industrial Control Systems honeypot, which can allow us to simulate multiple systems types. 

Running an Honeypot might allow us to understand who are our opponents and how they attempts to exploit our environment. later this information might help us to develop accordingly our security solution for the "real" product environment.

you can get Conpot from  github.com/glastopf/conpot 

enjoy 

3 Replies
007_mjn
Contributor

can you explain how to use honeypot with checkpoint firewall.

I have to deploy honeypot with 6200 and 3600 series firewall. 3600 series firewall for IOT devices security. 

where to deploy honeypot and how to designed topologies for this?

Shlomi_Feldman
Employee Alumnus
Employee Alumnus

please follow the instructions here https://conpot.readthedocs.io/en/latest/

the honeypot is not installed on CP GWs. however based on the results you can update your security policy and activate if necessary additional threat preventions tools

0 Kudos
Blason_R
Leader
Leader

conpot is there for quite a long time and yes indeed its good one but its a low interaction.

Thanks and Regards,
Blason R
CCSA,CCSE,CCCS
0 Kudos
Upcoming Events

    CheckMates Events