SecreenConnect security

I use ScreenConnect self hosted. It is running through port 443.
What is the best practice to make this is as secure as possible?

Keep it up to date, SSL cert, 2FA, separate user account for admin vs usage, and block inbound connections from non-US IP addresses via pfblocker.


Thanks Tom! Btw, I use Untangle