I've used Drayteks for a number of years and am familiar enough with the Firewall configs.

I'm looking for some general advice based on other peoples experience.

What it your general Firewall rule setup for a general office network? I realise every network is different but are there any specific rules that you apply to every network setup?

Any advice or pointers would be helpful.

I personaly add all servers to groups and block inbound access to them then add rules to allow certain ports for each one RDP for example.

I dont think their is a general rule as every one is difrent

Yeah I know, it's a pretty broad question

That's the kind of feedback I was looking for... i.e. block all in and then allow out port by port.

Anybody got any other ways of approaching a fresh setup?

Depends on the site of the setup but for a smallish office I'd give each PC a static IP so I can then create 'IP objects' and 'IP groups' depending on the users of said PC's.

I could then dissallow internet access to people who didnt require it but still give them access to email or even create web access policies dependant on users.