I'm curious how many of you allow ADManager Plus to be reachable from the outside world? With the new 2FA authentication added to ADManager Plus, I've been giving it more thought to make it easier for me and my other tech's to get to it. Half of me though worries about security and what might happen if there was a vulnerability. 

I'm interested in what other SysAdmins do and what your best practices might be...

Thanks!