Trust but verify. Just wanted to add that in my opinion it is best practice to schedule a recurrent task for scanning the network using tools like nmap.

On top, add.

After done (re)configuring a (new)device on you network, scan and document baseline. Verify baseline recurrently.