Let me explain the scenario that goes in our company.
We use VPN.
Then, we use Remote Desktop Connection RDP and connect to a server.
From that server, we access other remote application servers using SSH (just SSH, no tunneling). (Our job is that of linuxadmin)
Whereas to connect to the database, we require to create a SSH Tunnel to the database.
I asked my manager about it but he wasn't very clear about it either or probably I missed the point. I don't understand the point of SSH tunneling. And why's that not directly accessible? What difference does SSH Tunneling makes in security, because if I am not wrong, almost everyone with the application server's access under the same VPN, can access that database via SSH tunneling.
Is there any advantage that SSH Tunneling offers in this scenario?
I'm failing to see a problem that SSH tunneling is solving in this scenario.