MSP: How do you connect to customer equipment?
-
This is a question for you guys doing remote monitoring and management of customer equipment.
Do you normally connect to the customers LAN directly through the firewall? How?
Or do you just connect to computers behind the firewall using ZeroTier, Teamviewer etc? -
While we are not MSP, we use some of those tools.
For desktops and servers, screenconnect.
For Linux systems, ssh via a jumpbox
I have a L2TP VPN setup at each client, but rarely use it.
-
@Pete-S said in MSP: How do you connect to customer equipment?:
Do you normally connect to the customers LAN directly through the firewall? How?
Never unless they demand it, which no one has, so never (thus far.)
-
@Pete-S said in MSP: How do you connect to customer equipment?:
Or do you just connect to computers behind the firewall using ZeroTier, Teamviewer etc?
This is what we do unless required to do otherwise.
-
@JaredBusch said in MSP: How do you connect to customer equipment?:
For Linux systems, ssh via a jumpbox
Us too, as the one exception to the above "direct" piece. It's a highly secured jump box in a data center. And the customer systems are tied solely to it, not open in general.
-
@scottalanmiller said in MSP: How do you connect to customer equipment?:
@JaredBusch said in MSP: How do you connect to customer equipment?:
For Linux systems, ssh via a jumpbox
Us too, as the one exception to the above "direct" piece. It's a highly secured jump box in a data center. And the customer systems are tied solely to it, not open in general.
So equipment that is not a PC (for instance switches, network appliances, printers) are managed through the computers on-site or through the jump box? Or perhaps not managed at all?
-
@Pete-S said in MSP: How do you connect to customer equipment?:
@scottalanmiller said in MSP: How do you connect to customer equipment?:
@JaredBusch said in MSP: How do you connect to customer equipment?:
For Linux systems, ssh via a jumpbox
Us too, as the one exception to the above "direct" piece. It's a highly secured jump box in a data center. And the customer systems are tied solely to it, not open in general.
So equipment that is not a PC (for instance switches, network appliances, printers) are managed through the computers on-site or through the jump box? Or perhaps not managed at all?
Either through tooling (e.g. not directly), or via an on site machine (local jump station.) In lots of cases for us, Ubiquiti gear can be managed through its own centralized consoles.