Jump/Bastion Host Setup

System Specifications:

You may use either a Windows-based or Linux-based system for the jump host. Adjust resource specifications based on the number of assets to be managed:

Network Requirements (Firewall Rules):

Configure the following firewall rules on the jump host:

• Enable outbound access to the SecOps Central Server on the following ports:

  
  

  • Port 58443 (HTTPS): https://<SecOps-Central-Server-IP>:58443

  • Port 58080 (HTTP): http://<SecOps-Central-Server-IP>:58080

• Allow local inbound HTTP traffic on port 5679 and 5680

Authentication Requirements (Target Assets):

• Linux-Based Assets: SSH service running on any custom port.
• Windows-based Assets: WinRM service running on port 5985.

1. Navigate to the Asset Module

• In the top navigation panel of the SecOps platform, click on the Asset module to access the asset management functionality.

2. Add Jump Host

• Click on Add Asset dropdown and select 'Add Jump Host'.

3. Provide Jump Host Information

• Agent Name: Enter a name for the agent that aligns with your naming conventions for easy identification.

• Operating System: Choose the asset's operating system and its architecture from the drop-down

• Asset Groups: Optionally, assign the asset to one or more asset groups to help categorize and manage it effectively.

• Criticality Level: Set the asset’s criticality level to determine its importance and impact in your operations.

4. Download Agent Details

• After completing the form, click on Download Jump Host to generate the jump host details.

• Navigate to the Notifications section to retrieve the following:

1. Jump Host Download URL: The link to download the jump host installation package.

2. License Key: A unique key to activate the jump host during installation.

• Windows jump host:
  Follow the instructions in the SecOps Solution Windows Agent Setup guide.
  

• Linux jump host:
  Follow the steps in the SecOps Solution Linux Agent Setup guide.

1. Check the agent status in the assets section of the product.
2. Run the below command to check the status on the jump host:                   sudo systemctl status secops_service.service