DMZ computer Hardening

[sisterpfsense]

Greetings:

For those placing a webserver or another computer in the DMZ, other than patching and securing other ports. was wondering what other measures others are doing to protect port 443 on their server. Best Practices?

Thanks