One thing we do to add some more security for SSH is we don't use the shared IP as the listen IP for SSH and we don't use the standard port 22. SSH is disabled by default and can be turned on for 24 hours max at a time.
Then we also have it set where a email is sent with IP and ISP information of the person that just logged in.
|
