Hello,
Just wondering if it makes any sense to put out a management network interface to the internet securely or not.
The problem (not a problem btw a really good thing) : I have my gateway/firewall ( the critical one) and some other also severe impact services running on it.
The servers are hosted in a datacenter reachable only in few hours. Remote hands is available, but I just would prefer a second backup solution.
The scenario assign a public ip as managment if. Secure it (maybe operate it on a different port is possible - this case also vshere client mod is needed I think). I wish to keep root user just would like to deny it's login from non-trusted (ie internet) zone.
Also I know I can allow connections for certain IPs or ranges, will be done, but I can only limit to certain contries/europe, but that's still a large number of potencial hackers.
And genrally any other idea is welcome to make this (if possbile as secure as possible).
I have vmware 5.0 free.
Many thanks.
Cheers,