After the CyberSense AMI has been deployed, enable SSH and HTTPS access from the
Cyber Recovery jump host to the CyberSense instance.
About this task
Perform these steps from the AWS Management Console.
Steps
Edit the Jump Host Security Group.
Allow SSH outbound from the jump host to the CyberSense instance, using the following parameters:
The type is SSH.
The protocol is TCP.
The port range is 22.
The destination is Custom.
The value of destination is the CyberSense Instance IP ex: 10.0.0.30/32.
Allow HTTPS outbound from the jump host to the CyberSense instance, using the following parameters:
The type is HTTPS.
The protocol is TCP.
The port range is 443.
The destination is Custom.
The value of destination is the CyberSense Instance IP ex: 10.0.0.30/32.
Edit the CyberSense Security Group.
Allow SSH inbound from the jump host to the CyberSense instance, using the following parameters:
The type is SSH.
The protocol is TCP.
The port range is 22.
The source is Custom.
The value of source is the Jump Host Instance IP. For example: 10.0.0.30/32.
Allow HTTPS inbound from the jump host to the CyberSense instance, using the following parameters:
The type is HTTPS.
The protocol is TCP.
The port range is 443.
The source is Custom.
The value of source is the Jump Host Instance IP.
Add an outbound rule to allow access to the Interface Endpoint, using the following parameters:
The type is HTTPS.
The protocol is TCP.
The port range is 443.
The value of destination is the Interface Endpoint IP address.
Edit the Interface Endpoint Group Security Group by selecting
<your prefix>_PPCR EC2 Endpoint SG and add an inbound rule, using the following parameters:
The type is HTTPS.
The protocol is TCP.
The port range is 443.
The source is Custom.
The value of source is the CyberSense Instance IP.
Edit the PPCR Jump Host Subnet ACL.
Add an inbound rule to allow ephemeral port access to the jump host subnet, using the following parameters:
A rule number, which you provide.
The type is Custom.
The protocol is TCP.
The port range is 1024-65535.
The source is the CyberSense Instance IP.
The value for Allow/Deny is Allow
Add an outbound rule to allow SSH from the jump host to the CyberSense instance, using the following parameters:
A rule number, which you provide.
The type is SSH.
The protocol is TCP.
The port range is 22.
The destination is the CyberSense Instance IP.
The value for Allow/Deny is Allow
Add an outbound rule to allow HTTPS from the jump host to the CyberSense instance, using the following parameters:
A rule number, which you provide.
The type is HTTPS.
The protocol is TCP.
The port range is 443.
The value of destination is the CyberSense Instance IP.
The value for Allow/Deny is Allow
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\