打开端口1433以安全地使用SSMS

I have a SQL Server placed in DMZ and I want to give access to internal users (and VPN clients) to use SSMS to remotely connect to it via port 1433 so server will accept the connection only form defined IP sources over this port, is it a safe approach for a production server?I have a SQL Server placed in DMZ and I want to