Securing ColdFusion 10

We are preparing to upgrade to ColdFusion 10 from ColdFusion 8.  We are particulary interested in best practices for securing the installation, in particular securing the administrator on external facing systems.

The installation will be in a Solaris environment using Oracle iPlanet Web Server.

Can anyone provide such best practices, experiences or suggestions?

Thanks in advance.