Abstract: Security of a protected computer that is accessible via a public network is enhanced by eliminating or reducing open network ports on the protected computer. To reduce open network ports, the protected computer initiates a control connection to an enterprise controller. A request for service from a client device is made to the enterprise controller. If appropriate, the request is then forwarded by the enterprise controller to the protected computer over the control connection. If the request is accepted by the protected computer, the protected computer opens an additional connection to the enterprise controller to provide for streaming of input and output between the task performed on the protected computer and the enterprise controller. This input and output is forwarded by the enterprise controller to the client device and/or protected computer.