How to protect yourself from backdoors in network equipment?

Does blocking internet access to the IP address of the switch management interface enough to prevent backdoor being used on that switch? Or are backdoors on switch equipment more advance than that?