3

A Jump Host is a special purpose computer on a network typically used to manage devices in a separate DMZ. So, I'm looking for the proper way to implement this for a target running on Windows.

I was thinking about using a tunnel to a Cygwin SSHD on the target host via some SSH client like Putty.

What is the best practice for that? Does Microsoft provide a solution?

1
  • 1
    Great article here: blog.industrialdefender.com/?p=612 but really it's up to you and your level of security required. Most places don't even mess with a Jump Host, but that article does provide great insight...hope it helps (although not an answer to your question)
    – TheCleaner
    Apr 25, 2013 at 14:03

2 Answers 2

5

Yes, Microsoft does provide at least one solution. It's Remote Desktop Services. Specifically, the RD Gateway component. Technically, RD Gateway is an RPC over HTTP proxy which utilizes SSL to provide users with RDP connections to remote computers or RD session hosts over port 443.

You ---[Port 443] ---> RD Gateway ---[Port 3389]---> Remote Host

But you mention Cygwin and SSH so your needs might dictate that you use something more Unixy.

2

Remote Desktop Gateway is probably as close you'll come to an official Microsoft solution.

Something along these lines:

                                                      +------------+
               +                 +        +----------->            |
               |                 |        |           |            |
               |                 |        |           | Server     |
 +-----------+ | +-------------+ | +------+------+    |            |
 |           | | |             | | |             |    +------------+
 |           | | |             | | |             |
 | Internet  +---->RDS Gateway +---->RDS Session |    +------------+
 |           | | |             | | |     Host    +--->|            |
 |           | | |             | | |             |    |            |
 +-----------+ | +-------------+ | +-------+-----+    | Server     |
               |                 |         |          |            |
               |       DMZ       |         |          +------------+
               |                 |         |
               +                 +         |          +------------+
                                           |          |            |
                                           +---------->            |
                                                      | Server     |
                                                      |            |
                                                      +------------+

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .