Fair warning: I'm a programmer, not an IT person. Thus I have no idea what I'm talking about and put myself entirely at your mercy.
I have three dedicated machines that we currently administer through RDP via the Internet. We also have a virtual machine where we do the same. The virtual machine and the dedicated machines are all on the same LAN.
I would like to restrict access to the dedicated machines such that RDP sessions to them can only be started from the virtual server. In short, we don't want RDP sessions to the dedicated machines being allowed over the Internet.
The end goal being: You RDP via the Internet to the virtual machine and then RDP from there to the dedicated machines.
This was proposed as a way of protecting the Dedicated Machines from external intrusion.
So I guess two things:
- Does this make sense to do? Does it actually add any level of security? If not, then what would be a right way to lessen the risk of unauthorized access to the dedicated servers?
- If it does, then in which direction should I look? Even just a few terms to get me started on Google would be awesome.