External Remote Services Mitigation

Limit access to remote services through centrally managed concentrators such as VPNs and other managed remote access systems. Deny direct remote access to internal systems through the use of network proxies, gateways, and firewalls. Disable or block remotely available services such as <a href="/mitre/techniques/T1028">Windows Remote Management</a>. Use strong two-factor or multi-factor authentication for remote service accounts to mitigate an adversary's ability to leverage stolen credentials, but be aware of <a href="/mitre/techniques/T1111">Multi-Factor Authentication Interception</a> techniques for some two-factor authentication implementations.