The first line of defense is access control, which drastically reduces the risk of bad surprises. Knowing the paths of approach to a protected place and being able to delay and limit the directions of an attack puts one in a better position.