I posted on webmasters, but someone suggested I ask here...
We have developers who work remotely and servers at an ISP. I'm trying to determine the best security model for accessing the servers. Currently users login with SSH or SFTP to manage files or connect. The servers are behind a firewall that blocks ports but is not restricting IPs b/c a developer may work at different locations or from home where IPs change.
My thought was to have all developers connect to a corporate VPN that's set up, then have the VPN make the connection to the servers through the firewall. I could block all IPs other than the VPN this way.
Is that a "standard" way to add security?