Configurations Replace default creds Enable Port Security Use VLAN Disable SSH Disable unused ports SNMP builtin security ACL Update firmware frequently