1.There are two Microsoft articles about how to plan security hardening for SharePoint Server and network topology requirements.
2.There is a similar question for you to refer.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.