This server could be used as a jump-point into your network. The only secure place for this server is a DMZ with strict access-control in the direction of your internal network.
--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.