vMX Security Best Practice

[BigPicture]

I am looking to implement vMX in AWS as one of my hubs.

The default security group provided with the launch of the vMX is any connecting to port 80.

This open the vMX device page directly.  I am interested to know what others are doing with security groups/

[PhilipDAth]

Configure a static port for AutoVPN, and then allow only that port in (and I also allow ICMP).

[BigPicture]

When you say static port do you mean on AWS or the remote MXs that are connecting to the vMX?

[PhilipDAth]

AWS.

[BigPicture]

Thanks Philip.