Bastion Host
Noun · Security & Infosec
Definitions
Bastion Host is a hardened administrative jump system placed at a network boundary to control and log privileged access. Security teams use it to enforce trust, reduce exposure, improve detection, or standardize secure operations in production environments. Its value depends on correct configuration, lifecycle management, and surrounding controls, because weak defaults, poor integration, or missing visibility can create gaps that attackers exploit.
In plain English: Bastion Host is a security concept or control that helps organizations protect systems, manage trust, and notice suspicious behavior before damage spreads.
Example: "After the review, the security team rolled out Bastion Host in the affected environment, documented the operating procedure, and verified through logs and test cases that the control reduced exposure without breaking normal administrative or user workflows."
Related Terms
- Air-Gapped Network
- Bluetooth Sniffing
- Data Diode
- Deep Packet Inspection
- Default Credentials
- DNS Cache Poisoning
- DNS Exfiltration
- DNS Firewall
- DNS Rebinding
- DNS Tunneling
- Domain Fronting
- Egress Filtering
- Endpoint Protection
- Group Policy
- Hardened Image
- Hardening
- HTTPS Inspection
- IP Reputation
- IP Spoofing
- Mobile Device Management
- Network Segmentation
- Port Scanning
- Domain Admin
- Jump Host
- Port ACL