Configurations Change default creds Enable Firewall Disable remote management or only use SSH Keep firmware up to date Implement ACL and SNMP security measures Enable Logging