For OS login, it is recommended to use passphrase protected SSH key pairs instead of passwords, and to not allow remote root login.
Generate a passphrase-protected SSH key for each system that needs to access the server
Disable SSH password authentication
Disable root login
Zixi Feeders, Zixi Broadcasters and Zixi Receivers have a section called ‘SSH tunnels’ in the settings screen. This section allows defining reverse tunnels to a remote SSH server, in order to allow accessing the application through a secure SSH tunnel remotely. Make sure to stop/delete all tunnels if remote access is not desirable
