import SupportOptions from "@/components/SupportOptions"; import Alert from "@/components/DocsAlert"; import Image from "next/image"; import Link from "next/link"; import PlanBadge from "@/components/PlanBadge";

Access a Remote Host

</PlanBadge>

In this guide, we'll use Firezone to secure access to a host based on the host's private IP address.

This is useful when you have a host that may be behind a firewall that you want to keep secure, but still need to access it from external networks like the internet.

After completing this guide, you'll be able to access the host using its private IP address and any services running on it, like SSH or RDP.

Prerequisites

A Site that will contain the host you want to secure access to. Create a Site if you haven't already.
One or more Gateways deployed within the Site. Deploy a Gateway if you don't have any in the Site where this host is located.

<Alert color="warning"> Opening ports on your network firewall is **not** necessary or recommended. Firezone Gateways perform secure NAT traversal for you. </Alert>

Step 1: Create a Resource

In your admin portal, go to Sites -> <site> and click the Add Resource button.
Select IP as the Resource type.
Enter the private IP address of the host you want to secure access to. This should be an IP that's directly reachable from the Gateway(s) in your Site.
Name the Resource something descriptive, like SJC File Server. You'll refer to this name when creating a Policy in the next step.
Click Save.

Step 2: Create a Policy

In the Policies tab, click the Add Policy button.
Select an appropriate Group and the the Resource you created in Step (1).
Click Save.

Step 3: Done!

You should now be able to access the host using the private IP address you specified in Step (1).