Unsolved
This post is more than 5 years old
1 Rookie
•
32 Posts
0
1743
November 9th, 2016 04:00
Disable ssh on proxy
Morning Community ,
Hope all is well.
Quick question: Can I disable ssh/putty on a number of avamar proxies to further "harden" the environment. I think I would still be able to access the proxy from the vSphere console?
Just not sure if this is possible or advisable???
I have already changed all the default passwords and could easily add another user with root credentials if needed but concerned that if I disable ssh will I actually be disabling the root user from ssh and therefore will not be able to access the vm even from vspehere console?
Neil
No Events found!
Zhou
1 Rookie
•
53 Posts
0
November 10th, 2016 17:00
From Avamar architecture, ssh is not needed to proxy. So I think it is OK to disable it. Then you will need to login on it with vSphere console. It will be trouble sometimes if you want to copy and paste.
Maybe you can also consider using iptables/firewall to limit the ssh IP range instead of turning off sshd.
--Beta