Other options to harden a switch include the creation of an access profile. In the following, I have created such a profile that has an implicit deny:

Next, I added a profile rule that would allow HTTP access from a particular IP address: