Honeypot

What do you like best?

Honeypots are very flexible. Honeypots are so flexible that they can be used in a variety of environments. This flexibility allows them to do things that a very small number of technologies can do: collect valuable information, especially against internal attacks.

Honeypots do not require high hardware resources in large networks. An old and simple Pentium computer can monitor millions of IP addresses or a very large network.

What do you dislike?

Honeypots have a narrow range of viewing. Honeypots only see those who interact with them. As a result, they do not see attacks against other systems or interactions with other systems. This point, while being an advantage, is also a disadvantage.

Recommendations to others considering the product:

Honeypot is a security tool that plays an important role in organizations' security, much more than firewalls and IPS.

What problems are you solving with the product? What benefits have you realized?

Organizations that record thousands of alert messages per day, using Honeypots, may only record one hundred alert messages. This makes it much easier to manage and analyze data collected by Honeypots.