Scenario

Administrators need SSH into private subnets. You do not want SSH exposed on the internet, and you want every admin session recorded. Which pattern fits?

Secure enterprise infrastructure

APublish SSH on every server and restrict it with a long passwordBA bastion (jump) host: admins authenticate there with MFA, then reach private hosts, and the session is loggedCA WAF in front of the SSH portDNAT the private hosts one-to-one onto public addresses

Pick an answer. You’ll see if it’s right. The longer explanation is what a plan opens.

Why

Nearby items

3.1 · A network lead says devices on the corporate VPN should be trusted because they ‘made it inside.’ Which model …
3.2 · A public web form is being hit with SQL injection attempts. The network firewall already allows 443 to the web…

28 items in the public index.