Make sure that an idea of separation of duties is implemented and rational obtain controls and account lockout/disabling controls are in place. They can be positioned in multiple spots about the network. Next-generation firewalls offer amplified defense from software-layer attacks and Sophisticated malware protection with inline deep packet inspection. https://ieeexplore.ieee.org/document/9941250