Use a multi-step approach.
Residential apps, one at the service disconnect, and one at the end unit, ie computer recep ect.
Commercial apps, at main service disconnect, and at every sevice disconnect after every SDS, and at end unit.
I go with TVSS/surge combos.
Dnk......