Using a product called Silverfort, we are able to provide MFA protection for the more difficult devices to protect like network switches, server management (e.g. iLO, iDRAC, etc.), UPS, etc. The product also provides protection for service accounts so these, often highly privileged, can be restricted to allow access to only what they are required for.