Web Console Security - remote management

[root2020]

For remote management I am using HTTPS, strong password and a random port number? Is this strong enough or should I use a VPN or some other method?

Thanks.

[jimp]

If you also restrict by IP range then it may be sufficient.

If your HTTPS port is open to the world, people can still see your pfSense login screen, which is undesirable. If you have packages installed, some package files are not protected by the pfSense login process so you could be exposing information you don't intend to be public.

Using a VPN is always the best way.