Regarding servers or services requiring additional connections. Any external IP address would require additional connections beyond the global setting, is this correct?
Yes you put a separate connection limit in for them , you must do this first before setting the global. The quick start guide warns about the order. In other words, all of my DNS servers, my email server, my gateway, et al which would sit on the WAN side of the box or for all intents and purposes off my network.