High
Only explicitly allowed traffic gets through. Best protection against circumvention, not compatible with a number of games and applications.
Medium
A good compromise of protection and compatibility with apps and games.
Low
DNS-only protection that works with all apps and games. Required for Netflix.