Can someone explain to me how jump servers mitigate the risk of malware infection please?
Whilst I understand some of the benefits of having a jump server as an extra layer of defence i.e. authentication, 2FA etc, however, say if a user's workstation or laptop is infected with a malware, and they can access a Jump server over SSH/RDP - can the malware not spread over this SSH session and eventually to the servers behind it? If yes, how is jump server helping here?
On a separate note, how can you disable the transfer or exfiltration of data from the Jump server via SSH/SCP - for both a privileged and non-privileged user who can access the Jump server? Is this even possible? Asking this from an insider threat perspective.