Jump/Bastion Host Setup

This guide outlines the process for deploying a jump host (bastion host), incorporating support for both Windows and Linux systems as the host platform.

Pre-requisites

System Specifications:

You may use either a Windows-based or Linux-based system for the jump host. Adjust resource specifications based on the number of assets to be managed:

Operating System: Any Windows or any major distribution of Linux may be used, as long as it meets the minimum requirements above.

Configure the following firewall rules on the jump host:

• Enable outbound HTTPS on port 443 for https://api.app.secopsolution.com 
• Enable outbound HTTPS WebSocket (WSS) traffic (port 443) to wss://socket.app.secopsolution.com.
• Enable inbound rule on port 5679 (HTTP) and port 5680 (HTTPS) on the Jump Host within your network.

Authentication Requirements (Target Assets):

• Linux-based target assets:

  • SSH service must be running (on any port, including custom ports).

  • Passwordless sudo must be enabled for the user account that will be used by the agent to connect to and manage the device.

• Windows-based target assets:

  • WinRM service must be running on port 5985/5986.

1. Navigate to the Asset Module

• In the top navigation panel of the SecOps platform, click on the Asset module to access the asset management functionality.

2. Add Jump Host

• Click on Add Asset dropdown and select 'Add Jump Host'.

3. Provide Jump Host Information

• Agent Name: Enter a name for the agent that aligns with your naming conventions for easy identification.

• Operating System: Choose the asset's operating system and its architecture from the drop-down

• Asset Groups: Optionally, assign the asset to one or more asset groups to help categorize and manage it effectively.

• Criticality Level: Set the asset’s criticality level to determine its importance and impact in your operations.

4. Download Agent Details

• After completing the form, click on Download Jump Host to generate the jump host details.

• Navigate to the Notifications section to retrieve the following:

1. Jump Host Download URL: The link to download the jump host installation package.

2. License Key: A unique key to activate the jump host during installation.

• Windows jump host:
  Follow the instructions in the SecOps Solution Windows Agent Setup guide.
  

• Linux jump host:
  Follow the steps in the SecOps Solution Linux Agent Setup guide.
  

1. Check the agent status in the assets section of the product.