3 ms·
Deploying to a mix of internal devices, many of which lack the ability to easily allow automatic certificate renewal, is not trivial.
by iso1631 6y ago
Deploying to a mix of internal devices, many of which lack the ability to easily allow automatic certificate renewal, is not trivial.
- kccqzy 6y agoPut a reverse proxy in front of it.
- iso1631 6y agoThis is generally the best way, as it allows you to use things like client certificates or some other form of authentication to enforce AAA, and reduce the requirement of using VPN (which itself increases the security as it reduces the number of holes in your network) Of course it's still unsecure from your proxy to the device, but that's a more managable risk