Re: site-to-site VPN with credential prompts?
Jan Claeys (HE12025-03-25):
> > I should mention that having an internet facing ssh service is
> > usually a very bad idea. The 'better' approach is to have only a VPN
> > exposed and use heavy security on that. Once the VPN link is
> > established you can ssh through the VPN to internal systems.
> Why do you think SSH is less secure than any other VPN ?
Why do you think Jan says ssh is less secure than a VPN when Jan is
saying that ssh is less secure than VPN+ssh?
I suggest to add port knocking to protect the VPN.
Regards,
--
Nicolas George
Reply to: