We recently wrote a somewhat controversial article for O’Reilly talking about how jump boxes or bastion hosts are going the way of the telephone land line. Take a read when you have a chance. Compliance has driven a number of practices in enterprises and sometimes the tail wags the dog.
It’s an interesting problem that deserves a better, more secure solution. In our article, we talk about why jump boxes are problematic and better approaches are out there. We strongly encourage those that have to deal with compliance issues to rethink their access control strategy. There are better ways to handle user access control and modern, cloud identity management solutions are exploring this issue. It’s what we are working on here at JumpCloud® with our Directory-as-a-Service® platform.