agreement5051

I've found the best solution to be make the only network connection available to my servers be a VPN, with my servers not even able to initiate connections to the internet. My thought process here is that if my servers had malware on them, they could not exfiltrate any data.

What do other people here do to keep their servers secure? I'm particularly interested how people manage log collection and filtering in a way that doesn't require constant manual monitoring.