Internal Vuln and Pentesting

My company hired a third-party company to carry out the black box internal pen testing.

The testing will be conducted offsite, and we plan to provide the team with VPN access and a jump host. However, we're unsure about the extent of the information we should share with them such as IP information or network topology.

WindowsJump host will be locked down behind the firewall. We're unsure if any ports need to be opened at the initial stage.

Is this …

access black box box cybersecurity host information internal network party pen pen testing pentesting share team testing third third-party vpn vpn access vuln