is IIS password authentification secure?

Hi everybody,

I need to publish a company website for our workers.

I am somehow extremely over-cautious ( also because of Exchange ProxyLogon issue).

If I only publish the SSL site to Internet and prevent anonymous acces and activate basic authentification, is that enough? (Server2019)

I am worried about someone loging in without any credentials, like with the Hafnium/ProxyLogon Exploit.

Greetings

icram