Also, enable two-factor authentication on the remote side if supported — the client itself rarely provides it.