Could someone do me a solid and explain best security practices around bastion hosts and vpn?
e.g.
- would you still require users connected to the vpn to go through a bastion host?
- would you ever run bastion/vpn through the same box?
- are there preferred access use cases for each?
e.g. - would you still require users connected to the vpn to go through a bastion host? - would you ever run bastion/vpn through the same box? - are there preferred access use cases for each?