Linux Bastion Hosts

The general concepts behind hardening a Linux bastion host are no different than they are for any other OS.You still need to minimize the installed software, update and patch the OS, and tighten the security settings. It is only the specific methods for accomplishing these tasks that vary with a Linux-based bastion host over a Windows-based one. The basic approach to hardening any bastion host (whether Linux, Unix, Windows, or other) can be summarized in the following high-level steps: 1. Planning comes before doing.