DPro-X Protecting NAT Pools

Hi!

I'm wondering what would be a best practice when configuring a Security Template to protect a NAT Pool, where there is no inbound traffic.

Any thoughts?