Jump server questions

[McKITGuys]

Hi all,
Am wading through the very large VBR docs in prep for re-installing our VBR setup (which was done years ago without much thought to security - not by me though!).

They have mentioned a jump server/PC. I have picked up "bits" from the documentation but have more questions:

I know that this PC is meant to give access to the VBR console that in turn accesses the VBR backup server. Does anything else need to be installed on it?

Can anyone tell me what else should be done to secure this? Is it also okay to access the jump server via RDP as both of our IT guys access the everything remotely?

Thanks.

[Mildur]

Hello

I would protect a jump host the same way you would protect your backup server.
RDP is ok, but should also be protected with MFA, if possible.
- Use Antivirus Software
- Keep it updated with OS updates
- Use MFA for the RDP and physical Login
- Use strong passwords
- Make sure that the jump host is physically protected
- Use a firewall to control who is accessing the jump host over network
- Monitor any unauthorized access to the jump host
- Don't join it to the productive domain
- .......

Microsoft has also some recommendations about it:
https://learn.microsoft.com/en-us/windo ... tive-hosts

Best,
Fabian

[McKITGuys]

Thanks. Lots to delve into and plan for as not using jump hosts for admin access at this time (small company) so starting from scratch. The MSFT article outlines a lot of options!