Cisco securing device

Switching off unnecessary

no ip source-route 
ip options drop 
no ip http server 
no ip http secure-server 
no service tcp-small-servers 
no service udp-small-servers 
service tcp-keepalives-in 
service tcp-keepalives-out 
no ip bootp server 
no ip finger 
no ip identd 
no service config 
no lldp run 
no service pad

! add logging buffer
logging buffered 50000
login block-for 300 attempts 3 within 300

References

• Best Practices for Inbound Cisco Access Lists 2007
• Best Practices and Securing Cisco IOS 2011
• How do I secure a Cisco router from the Internet? 2009