Jump Box

---

A jump box is a hardened server that provides access to other hosts between security zones.

• aka jump host/server
• only runs the necessary administrative port and protocol
• how it works
  • administrators connect to the jump box
  • use the jump host to connect to the admin interface on the application server
  • application server’s admin interface has a single entry in its ACL
    • denies connection attempts from any other hosts

Use Case

• challenge of managing hosts exposed to the Internet (e.g., screened subnet or cloud) is providing admin access
  • a link is necessary
  • but admin interface could be compromised
    • could be used as a pivot point into the rest of the network
• thus management of hosts used for admin access needs to be tightly controlled
  • configuring and auditing is complex
• jump box is a solution
  • used as a single administration server to secure the zone