Gartner published their dirty dozen worst network security practices in a research note.