PCC… is normally recommended.
Depends upon requirements.
- any external traffic coming in to servers? (wan to lan)
-any external traffic going to the router (vpn handshake) - Lan requirements, anything different from PCC, subnet to specific WAN or users?