Closing all ports that are not needed and applying all the patches would be a good start