L A B Y R I N T H

Loading

Gartner Peer Insights

1. NEW AND IMPROVED

1.1. Improved Honeynet list

Honeynet list was refactored, which includes:

  1. New pagination
  2. Filtration
  3. Data download in CSV format

1.2. Description of a reason for Point failed status
Before this release, it was difficult to understand why Point could move to failed or pending status. 
Now the Status reason field describes the reason for the Point status.

1.3. Elasticsearch index rotation
To reduce the use of RAM and disk space, an automatic index rotation and deletion function has been added. 

Elasticsearch is used for raw logs that are processed and turned into Alerts.

1.4. Edit basic Point parameters
Now it is possible to change some Point parameters without regenerating Honeynet. 

These parameters include:

  • Hostname
  • IP address
  • MAC address

Move to Point’s Detail/Info  and click on the edit button.

 

1.5. Single appliance

The Labyrinth Deception Platform used to be distributed as two separate appliances - Admin/Management  Console and Worker Node.

From now it will be distributed as a single appliance. Node type should be chosen during the initial configuration in the pseudo-graphical interface.

This reduces the total size of the resources a user has to download while installing an Admin/Management  Console and a Worker Node.

An appliance type can be set in the Basic configuration section of the menu.

 

Setting up an appliance type is a one-time operation, and it is not possible to change this setting in the future.

1.6. Point menu: disk resize
This version adds the disk expansion function to the pseudo-graphical menu. 

If necessary, the virtual machine disk may be expanded (using the virtualization platform tools) by selecting Extend disk size in the menu. This operation will expand the disk to its maximum size.

1.7. Point menu: show the MAC of the interface
Information about the MAC addresses of the available network interfaces has been added to the pseudo-graphical menu.

The Show current configuration section displays the MAC address of the current management interface:

It contains all the MAC addresses of the available network interfaces that can be used as a management interface.

2. FIXES
2.1. Confusion with MAC addresses in Point that receive a dynamic IP address

In a Honeynet of DHCP type, Points receive an IP address dynamically from a DHCP server. 

A bug has been detected and fixed where a DHCP request comes with one MAC address, but the actual MAC of the Point's network interface is completely different.

2.2. DHCP address renewal
Under certain circumstances, DHCP-enabled Points in Honeynet are used to periodically stop sending an IP update request to the DHCP server.

2.3 Tenant disappears from the tenant switching menu if the tenant cannot be deleted
When trying to delete a Tenant that cannot be deleted (for example, because it contains generated Points), the user used to receive an error, the Tenant was not deleted (which is correct), but the Tenant disappeared from the Tenant selection menu. When the web page was refreshed, everything worked as it should.

2.4. Error connecting the 10th worker
There was an error that made it impossible to add the 10th Worker Node.

2.5. Point in DHCP Honeynet fails if gateway info is missing
If a Point in DHCP Honeynet tried to obtain an IP address from a DHCP server, but the response from the server did not contain a network mask or gateway/router, the Point would fail.

This does not happen now. If such a situation occurs when the DHCP server is not properly configured, the mask and gateway/router data from the Honeynet configuration are used.

2.6. Internal Server Error on TLS key with the password
If there was an attempt to download your TLS/SSL certificate and password-protected key, the user received an uninformative error - Internal Server Error. Now, in this case, an error is indicated that the key must be without a password.

 

 

Subscribe to our Newsletter

You successfully subscribed!