From a security standpoint it is recommended to put them behind a firewall on a DMZ interface away from the rest of the network, this is to control inbound and outbound access. With that being said, you need to consider if any of the services you pro...