the operating system and software on the jump server up to date. Using ACLs to restrict access. Not allowing outbound access to the rest of the internet from the jump server. Restricting which programs can be run on the jump server. Enabling strong logging for monitoring and alerting of suspicious activity. With the high level of risk that a jump server can represent, a VPN may be a suitable and higher security replacement. In 2015, a compromised jump server allowed attackers access to over 21.5 million records in one of the largest breaches of government data in the history of the United States. See also Bastion host Proxy server References External links Computer network security Network architecture