Of course, don't expose to the public Internet.

Also don't expose plain text traffic to the internal corpnet where most attack originate from.