I'm not sure what's the standard now, but I also always set "use ssh protocol v2 only" -- and you probably should too (on the off chance that you have some ancient device that doesn't handle version 2, you should probably make an exception in that profile).