2

A Jump Host is a special purpose computer on a network typically used to manage devices in a separate DMZ. So, I'm looking for the proper way to implement this for a target running on Windows.

I was thinking about using a tunnel to a Cygwin SSHD on the target host via some SSH client like Putty.

What is the best practice for that? Does Microsoft provide a solution?

  • 1
    Great article here: blog.industrialdefender.com/?p=612 but really it's up to you and your level of security required. Most places don't even mess with a Jump Host, but that article does provide great insight...hope it helps (although not an answer to your question) – TheCleaner Apr 25 '13 at 14:03
4

Yes, Microsoft does provide at least one solution. It's Remote Desktop Services. Specifically, the RD Gateway component. Technically, RD Gateway is an RPC over HTTP proxy which utilizes SSL to provide users with RDP connections to remote computers or RD session hosts over port 443.

You ---[Port 443] ---> RD Gateway ---[Port 3389]---> Remote Host

But you mention Cygwin and SSH so your needs might dictate that you use something more Unixy.

2

Remote Desktop Gateway is probably as close you'll come to an official Microsoft solution.

Something along these lines:

                                                      +------------+
               +                 +        +----------->            |
               |                 |        |           |            |
               |                 |        |           | Server     |
 +-----------+ | +-------------+ | +------+------+    |            |
 |           | | |             | | |             |    +------------+
 |           | | |             | | |             |
 | Internet  +---->RDS Gateway +---->RDS Session |    +------------+
 |           | | |             | | |     Host    +--->|            |
 |           | | |             | | |             |    |            |
 +-----------+ | +-------------+ | +-------+-----+    | Server     |
               |                 |         |          |            |
               |       DMZ       |         |          +------------+
               |                 |         |
               +                 +         |          +------------+
                                           |          |            |
                                           +---------->            |
                                                      | Server     |
                                                      |            |
                                                      +------------+

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.