ServiceDesk in DMZ

Hello,

Our current installation of ServiceDesk plus is reachable only from inside the network and over VPN. We are considering moving ServiceDesk server to DMZ to allow our company users and technicians access it without need to of VPN while they are working remote.

Alternatively we could leave the server on the LAN side and open ports in the firewall to the server.

What are some best practice would you recommend for these scenarios? Is there a list of ports? Any security measures should be taking to secure the server if it's in DMZ environment? Does ServiceDesk Plus support use of Reverse Proxy?

Thank you for looking.

Thanks,

Slava