Unix Security

Aside from applying the latest & greatest patches, can someone give me a list of things to do to tighten up security on my Sun Workstation? It is sitting outside our firewall, but is behind the router.