So in the world of networks, people try to gain access to the client machine and perform lateral movement. Honeypots are often used to give them an easy access point and show them an unfavorable or fake environment so they leave before doing any real harm, the intrusion gets logged, and the network is safe.
At least in theory this is how a honeypot should work, from my understanding. However, recently I've been tasked with setting one up and while I see a couple that exists, I'm curious what it is that a honeypot does to actually keep your network safe?
IF they gain access to the honeypot, isn't lateral movement still able to be achieved or does the honeypot have some sort of software to make this a living nightmare for the attacker?