Need advice on my firewall rule setup

[Ssaven]

Hey everyone, just jumped on board PFsense and I have to say, best decision yet.. What a difference from consumer.. man was I blinded..

Anyways, I have a basic firewall setup in the lab and I can use your advice to make sure from a starting standpoint, I am secure.

WAN.
Has two pre-defined rules only, block private & bogon. I am assuming that no more is needed here as EVERYTHING should be blocked inbound.

I have a few Vlans, but here is an example of my guest vlan.. Too much too little?

Here is one of the lab vlan (non-mgmt accessible, only can get to NAS & IOT)

And the main network vlan (I can get to the mgmt ports now so I can take pictures, but the first rule will be changed to blocked)

They seem to work, but I feel I am overthinking this.. Maybe a way to make them more efficient?
I plan to run Suricata and a few other packages.. but the rules I want to make sure are solid..

Thanks for your feedback..