# How dangerous is port forwarding to a server in the office?

It puts that server directly on the internet, where automated scans find it quickly and attacks never stop, so it is as dangerous as the service and its maintenance are weak. A forwarded port to a web server that is patched weekly is a manageable risk; a forwarded port to a storage box, a camera recorder, remote desktop or an old test machine is a common way into small offices. Prefer alternatives: a VPN for staff, a cloud-hosted service, or a reverse proxy in a separate network segment. If you must forward, forward one port to one hardened host, keep it updated, require strong authentication, log access, and isolate the host from the rest of the network so that a compromise stays there. Check the router for forgotten forwards and automatic port opening (UPnP), and switch them off. NetSenX sees inbound connections to monitored hosts and flags scanning, repeated login attempts and lateral movement from the exposed host, on every plan.

FAQ: [Remote work and exposed services](https://netsenx.com/en/faq/remote) · https://netsenx.com/en/faq/how-dangerous-is-port-forwarding-for-an-office-server

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/encrypted-traffic-analysis

## Related questions

- [How do I check what our company exposes to the internet?](https://netsenx.com/en/faq/how-to-check-what-our-company-exposes-to-the-internet)
- [Is automatic port opening (UPnP) on the office router a risk?](https://netsenx.com/en/faq/is-upnp-on-the-office-router-a-risk)
- [Who notices a remote login at 3 a.m. on a Sunday?](https://netsenx.com/en/faq/who-notices-a-remote-login-at-3-am-on-a-sunday)
- [Is remote desktop (RDP) exposed to the internet dangerous?](https://netsenx.com/en/faq/is-rdp-exposed-to-the-internet-dangerous)
- [How do we know if our VPN has been compromised?](https://netsenx.com/en/faq/how-do-i-know-if-our-vpn-is-compromised)