1.Secure network devices with AAA, SSH, role-based CLI, syslog, SNMP, and NTP. 2.Secure services using AutoSecure and one-step lockdown. 3.Protect network endpoints, such as workstations and servers, against viruses, Trojan Horsevs, and worms with Cisco NAC, Cisco IronPort, and Cisco Security Agent. 4.Use Cisco IOS Firewall and accompanying ACLs to secure resources internally while protecting those resources from outside attacks. 5.Supplement Cisco IOS Firewall with Cisco IPS technology to evaluate traffic using an attack signature database. 6.Protect the LAN by following Layer 2 and VLAN recommended practices and by using a variety of technologies, including BPDU guard, root guard, PortFast, and SPAN.