Network devices should have unencrypted remote admin protocols disabled, unnecessary services turned off, and robust password policies implemented. Multi-factor authentication, regular patching, and protecting configuration files with encryption or access controls are also essential for device security.