any1 around here familiar with jboss application server?

cause seems that a normal install of it contains a hell of a lot of bugs. I found some tips etc on the net on securing but was wondering if any1 has got experience with it and can point me in a better direction.