Internal firewalls

IT started to put internal firewalls in place. An example where this might effect existing workflows is the remote connection to beamline or linux PCs via ssh and max-display.

Old workflow (no longer working):

• connect to max-display / max-fs-display via FastX client or in the browser
• use ssh to get access to beamline PC

New workflow

• connect to max-display / max-fs-display via FastX client or in the browser
• ssh to bastion using MFA-authentication
• ssh to beamline PC

Useful resources in this context provided by UCO can be found here