Even with the best firewall device and security software, employee behavior is the weakest link in staying secure. Keeping rules as simple as possible is best for everyone.
This is a really great article.
https://hbr.org/2017/11/the-key-to-better-cybersecurity-keep-employee-rules-simple