Attivo BOTsink vs. FortiDeceptor

Attivo BOTsink is a great network security tool for organizations that may not have a dedicated security team, but need to have threats reported in real time. It seems well suited for medium to large sized organizations that may have several subnets, VLANs, and remote locations.

Incentivized

FortiDeceptor is a useful service for a large corporate network that has extensive network resources and can commit the manpower to protect them. It's a straightforward approach to offer a high degree of protection from malicious content and attacks. A smaller network might not benefit from a traditional firewall and IPS would likely be sufficient.

Incentivized

• Identifies devices
• Provides threat details in real time
• Provides network topology with potential threat paths

Incentivized

• Gain visibility of network-related attacks & laterals movements that could potentially bypass existing security in place.
• Redirect attacks from existing critical platforms as well as sensitive data .
• Early warning system to deal with threats.

Incentivized

• More fine tuning of threat detection capabilities needed
• Users should be able to modify AIML configuration
• Improving the display dashboard

Incentivized

• The GUI for FortiDeceptor is very detailed but can be a little tricky to navigate with many options spread out in its menus.
• The "attack map" gets points on its appearance but I'm not sure how useful it is as it's simply full of IP addresses and geographic locations.

Incentivized

Attivo BoTsink was selected based on cost price and wide coverage of detection capabilities. Our decision was primarily based on reducing efforts to identify and mitigation of attacks. The ease of deployment was additional factor in decision making. As compared to Zscaler Deception and SentinelOne Singularity I found Attivo BoTsink detects more threats

Incentivized

Since we have other Fortinet solutions like Fortigate NGFW & FortiSIEM in place, they share the threat intelligence with each other, and FortiDeceptor works very well in FortiFabric environments, We decided to go with FortiDeceptor for Deception technology. In the case of Rapid7 & Smokescreen, we had to counter the integration issue with existing IT infra, Security solutions should not work in silos, they need to share intelligence with each other to get the best from the existing Solution & to get the best ROI.

Incentivized

• Helped reduce 20% of Security teams time in threat detection
• Reduction of 40% of attacks
• Automated deployment helped in improving efficiency of the team by 30%

Incentivized

• It deploys decoys automatically, saving us the manpower.
• It has been the way to go for cybersecurity in our converged IT and OT environment.

Incentivized