Is enabling HTTPS management of the WAN interface considered a best practice?

Enabling HTTPS management of the WAN interface is generally considered not a best practice because it exposes the management interface of the firewall to the public internet. Allowing management access over the WAN can increase the attack surface and make the firewall vulnerable to unauthorized access and exploitation.

Best practices typically involve restricting management access to trusted internal networks or dedicated management interfaces that are not exposed to the public internet. This limitation significantly reduces the chances of a remote attack compromising the firewall. It's advisable to use secure management practices such as restricting access to specific IP addresses or only allowing management via a VPN or secure management connection.

By following these practices, administrators can maintain tighter control and better security over critical infrastructure management interfaces.