Best Practices - Securing your Windows Server 2016 VM on Vultr
-
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
ZT is really nice.
And did we mention free for up to 100 devices?
On the hosted version, and free unlimited if you host yourself (which isn't cost effective as the cost of a VM is as high as the cost of the service.)
Price went up to $29 / month if you're hitting > 100 devices (unless you are grandfathered in on their $4 / month payments). But their web interface and management tools make it worth it to me. Managing a controller is a bit of a hassle without their web front end.
A hassle compared to the web front end? hard to believe, that thing is a huge hassle.
Really? I find it rather easy, although they keep changing stuff, lol.
A good CLI would be dramatically easier.
+100000000!
-
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
ZT is really nice.
And did we mention free for up to 100 devices?
On the hosted version, and free unlimited if you host yourself (which isn't cost effective as the cost of a VM is as high as the cost of the service.)
Price went up to $29 / month if you're hitting > 100 devices (unless you are grandfathered in on their $4 / month payments). But their web interface and management tools make it worth it to me. Managing a controller is a bit of a hassle without their web front end.
A hassle compared to the web front end? hard to believe, that thing is a huge hassle.
Really? I find it rather easy, although they keep changing stuff, lol.
A good CLI would be dramatically easier.
+100000000!
If the build your own controller doesn't have one, might be easy to make.
-
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@dafyre said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
@scottalanmiller said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
ZT is really nice.
And did we mention free for up to 100 devices?
On the hosted version, and free unlimited if you host yourself (which isn't cost effective as the cost of a VM is as high as the cost of the service.)
Price went up to $29 / month if you're hitting > 100 devices (unless you are grandfathered in on their $4 / month payments). But their web interface and management tools make it worth it to me. Managing a controller is a bit of a hassle without their web front end.
A hassle compared to the web front end? hard to believe, that thing is a huge hassle.
Really? I find it rather easy, although they keep changing stuff, lol.
A good CLI would be dramatically easier.
+100000000!
If the build your own controller doesn't have one, might be easy to make.
I tried at one point. It was... more trouble than it's worth to me. I'd happily help somebody else though.
-
@bigbear said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
This https://rdpguard.com/ @scottalanmiller posted looks like something worth trying out first. Also appears to be actively developed. Anyone else using it?
I'm using rdpguard for a few clients. It seems to work well.
-
@Mike-Davis it seems like RDP guard would be simpler than a VPN for the purpose of allowing users to access the system "wherever" they are, mobile devices etc included.
However I wonder if Vultr ip ranges are scanned more frequently than Azure. I setup a couple honey potts and the attacks are 10 to 2 Vultr vs Amazon thus far.
-
@bigbear - I use https://cyberarms.net as a fail2ban for Windows equivalent. They used to charge a fee for licensing but now it is completely free. Very quick and easy to setup.
-
@bigbear said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
However I wonder if Vultr ip ranges are scanned more frequently than Azure. I setup a couple honey potts and the attacks are 10 to 2 Vultr vs Amazon thus far.
I would have to wonder if it's also a matter of a weakness detected in the range once so now the robots keep pounding that IP or range. I say this because I had a server that had a vulnerability that went unpatched. After I patched it, the bad guys kept pounding the site. I even went as far as to move the site to a new server with a new IP and they kept looking for the vulnerable URLs for more than a week with thousands of requests coming in each hour.
-
can we get fail2ban added a tag on this thread?
-
@Dashrender said in Best Practices - Securing your Windows Server 2016 VM on Vultr:
can we get fail2ban added a tag on this thread?
can we get any tags added to this topic....
-
Tags added.
-
@syko24 free... and useless:
Limitations of the free license:
The free license is limited to five locks per day which means the free edition defends your system against five unique attacks per day. [...] The free license does not contain reporting (like the PRO edition does).
Also, no official support for Windows Server 2016.
https://cyberarms.net/download-pricing/installation-configuration.aspx
