1
vote
2answers
568 views

Windows Jump Host

A Jump Host is a special purpose computer on a network typically used to manage devices in a separate DMZ. So, I'm looking for the proper way to implement this for a target running on Windows. I was ...
2
votes
3answers
153 views

Securely connect to mainframe from cloud

I will preface this by saying that I am a solution architect, and I have a client who wishes to host an app in the cloud. The app needs to access information from SAP and other systems. What is the ...
21
votes
5answers
12k views

What are the exact protocol level differences between SSL and TLS?

This is a technical deep dive after this overview question was asked. What are the protocol differences between SSL and TLS? Is there really enough of a difference to warrant a name change? (versus ...
0
votes
3answers
1k views

Firewalls that block RDP over port 443

I need people to reach my servers over SSH and RDP. Both ports are blocked outbound at many companies, especially the large ones. However, I also suspect that in 90% of companies there is nothing to ...
2
votes
8answers
4k views

Encrypted Host-to-Host Tunnel on Ubuntu/Debian?

I'd like to connect two remote sites via a secure point to point tunnel. I've been using OpenVPN, but it's a little flakey and really seems to be more for connecting lots of users rather than a point ...
1
vote
2answers
301 views

Security concerns of having IPv6 (tunneling) enabled in network computers

Are there any security concerns having IPv6 and Teredo tunneling enabled in Win Vista/7? AFAIK, using Teredo basically allows bypassing of the firewall, as the firewall cannot really filter the ...
2
votes
4answers
585 views

Need an absolute proxy server to route HTTPS, FTP, etc

I have managed to setup a squid proxy server as an HTTP proxy and this is working well. However, it does not work with HTTPS. I am looking at making use of an external machine to setup as a proxy for ...
12
votes
6answers
5k views

How would you send syslog *securely* over the public Internet?

So I've got a few servers which I'd like to log centrally but obviously I don't want to pass the data insecurely over the internet. I've tried syslog-ng but can't make it work in a secure way, a ...