Plan your software security requirements before you deploy the appliance.
Disable all unused services.
Restrict the IP addresses that can use appliance services, such as IP addresses that might relay email or access SSH.
Control who can access the physical or virtual appliance console.
Use out-of-band management on a network that ePO - On-prem can access to isolate management and network traffic.
LAN 1 traffic must not be accessible from outside your organization.
Connect any baseboard management controller (BMC) interface to a dedicated secure management network.
The Support Notification Service (SNS) delivers valuable product news, alerts, and best practices to help you increase the functionality and security fixes to your appliances. To receive SNS email notices, go to the SNS Subscription Center, and register and select your product information options.