Replace ad-hoc internet port forwards with a central, MFA-protected remote access portal.
remote.mackdesigner.com (via HAProxy VIP 71.162.125.137)
- MFA required for admins
- Audit logs enabled
- Device inventory and remote terminal/desktop
- Stand up MeshCentral server
- Test with a small set of machines
- Move IT admin workflows behind MeshCentral
- Disable SSH port forward (2222) after validation