proposed Security Measures for POPs of an ISP

I mean as an ISP with different POP and you are applying Interconexion for organizations , which security method will be great to apply on the switches of your differents pops(base station) and on your firewall and checkpoint?

Please could you specify good steps?

thanks you