Outside of a direct strike, You can still melt gear left and right. The fix is no one solution, But multiple.
1. Shielded Ethernet with proper shielded and bonded ends.
2. Proper Grounding
3. Ethernet Surge Suppressors.
4. Proper Grounding.
5. Proper Grounding.
The key is to make your sensitive electronic equipment a higher resistance path instead of your grounding system. You're going to get inductance build up on cables you just have to get it to ground through something that isn't your site switch/router. And it's going to get there one way or another. Sometimes this can be harder then one might think. Even considering sinking your own ground rod, And replacing it every few years. As a ground rod becomes less and less effective with every strike (Depending on what it's sunk in). Ethernet Surge Suppressors CAN help. But only in assisting in getting whatever was already on the cable to ground.
And don't forget ground potential differences between different grounding systems.
Doing the above will get you through most near by strikes. But all bets are off on direct strikes. The above can also help you with a ton of other interference. Like a giant FM transmitter running at 100KW a stones throw away from your equipment but that's another story for another thread.