TechKnowSurge
CompTIA Security+ 3.2 ISC2 CISSP 4.2 NIST 800-53 AC-17 NIST CSF PR.AA-05 CompTIA Security+ 4.5 ISC2 CISSP 4.3
TechKnowSurge Catalog Videos Jump Server
VideoSecurityFree

Jump Server

A jump server is a controlled access point that allows remote users to connect to internal network resources without exposing the broader network to outside traffic. It supports connections via SSH for command-line access or RDP and VNC protocols for full desktop sessions.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

A jump server, also referred to as a jump box or jump host, is a hardened machine positioned inside a network that acts as the single authorized gateway for external remote access. The firewall is configured to allow inbound connections only to this machine, keeping the rest of the internal network shielded from direct outside exposure. Once a user establishes a connection to the jump server, they can then reach other internal resources as if they were operating from within the network itself. A key security advantage of this architecture is that sensitive data never leaves the internal network. When a remote user accesses files or resources on the jump server, they are interacting with a live session on that machine rather than downloading content to their local device. This significantly reduces the risk of data exfiltration during remote work sessions. Connections to a jump server can be established in several ways depending on the use case. SSH is commonly used to access Linux-based or headless systems where command-line interaction is sufficient. For environments that require a full graphical desktop experience, Remote Desktop Protocol and Virtual Network Computing are the standard options, each supported by a range of client software to facilitate the remote session.

What you'll learn

What's covered

Jump Server

Aligned to

CompTIA Security+
3.2 Given a scenario, apply security principles to secure enterprise infrastructure.
4.5 Given a scenario, modify enterprise capabilities to enhance security.
ISC2 CISSP
4.2 Secure network components
4.3 Implement secure communication channels according to design
NIST 800-53
AC-17 Remote Access
NIST CSF
PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties.

Key terms

Secure Shell
SSH
A cryptographic network protocol that provides secure remote login and command execution over an unsecured network.
Firewall
A network security device that monitors and controls incoming and outgoing traffic based on predefined security rules.
Network Segmentation
The practice of dividing a network into smaller segments to improve performance and limit the spread of security threats.
Jump Server
A hardened intermediary host used to provide controlled access to devices within a separate network segment, also known as a jump box or jump host.
Remote Desktop Protocol
RDP
Remote Desktop Protocol is a Microsoft protocol that enables remote graphical access to Windows systems; it is a frequent attack target commonly exploited via credential brute-forcing, session hijacking, and unpatched vulnerabilities such as BlueKeep.
Virtual Network Computing
VNC
Virtual Network Computing is a graphical remote desktop sharing system; in security contexts, unsecured VNC instances with weak or absent authentication are a common target for unauthorized remote access and lateral movement.

Topics

Jump Server Network Access Control Ssh Rdp Vnc Remote Access Networking

Transcript

Another way we can gain access into a network is through a jump server. One thing to note is that a jump server could go by many different names, to include jump box or jump host. What this essentially is is that we have a machine on the inside, and we can't access really much of anything within the network through the firewall except for this machine; by remoting into this machine we now have access to other resources on the network.

This is great because a lot of your sensitive information never leaves this network right here. Essentially what happens is you just get a bunch of data describing the desktop right here. So if you were to download anything from maybe the server, maybe some sort of resources, onto this machine, it would still stay on the network. It would never get downloaded to this laptop over here. So it's a great way to m some sense of security with here, and you're not opening up the rest of your network to the outside. You're just opening it up to this one machine.

Connecting into the jump server

There are several different ways we can make a connection into this machine. One way is to use secure shell. This is great for Linux or other machines that don't have a front end, that you just want to SSH into and then use command line for that. But if you want a full desktop experience, then we're going to need some sort of protocol like remote desktop protocol, or virtual network connection, VNC or RDP. These are two different protocols that can be used to connect in, and there's different softwares that can help set up these two protocols for that connection.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →