First things I did on my own server at home: 1. Disable public ipv6 on the iLO interface 2. change all the passwords 3. Set-up tls on the web interface and f

First things I did on my own server at home: 1. Disable public ipv6 on the iLO interface 2. change all the passwords 3. Set-up tls on the web interface and force http to https redirection. Ironically, point 3 alone is really most of the protection: the web interface is so slow in https it's basically unusable.