Hello,
I have an Apache2 running as Loadbalancer with 3 Tomcat instances as workers.
I have also set the mod_ssl and the hole system works fine.
Now, I would like to make it Secure.
I have read about mod_security , mod_auth_cas , e.t.c , i also thought to redirect everything to 443(Secure port) via mod_rewrite.
Anyway,i would like some help from someone expert on security to tell me what should i do to secure my system.

Thanks in advance

p.s : A how-to would be perfect.
p.s2 : Excuse me if my English was not good.