We are migrating to Google Cloud (GCE). We have a SFTP server running on Windows Server. We want to migrate this but we must have a white list filter and block all other SSH login attempts (i was getting hits minutes after install, hackers trying to login).
I can't seem to do it at the Google cloud firewall, because it doesn't allow exclusions for certain ips (it's either all or nothing).
Same thing with Windows Firewall (we are running Server 2016). You can specify allow rules but its worthless because deny rules are interpreted first.
I should be able to install a commercial product, but the first thing they seem to do is block EVERYTHING and now I can't even login.
Any advice or recommendations?