this post was submitted on 28 Jul 2023
10 points (75.0% liked)

Sysadmin

7954 readers
3 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
[email protected]
[email protected]
[email protected]
[email protected]

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
10
Is RD Gateway hosted by Amazon secure enough? (aws.amazon.com)
submitted 2 years ago by [email protected] to c/[email protected]
8 comments fedilink hide all child comments
 

My company is about to shift a large workload to a vendor that uses an RD Gateway hosted at Amazon to serve access to the front-end application. It's open to the internet at 443. There's no MFA. How worried should I be?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 2 years ago

It’s pretty bad. You are going to be vulnerable to password spraying at the very least and a phishing email or credential leak, both incredibly common, will result in a bad day.

You need MFA and preferably FIDO based MFA with conditional access.