It should be remembered that any device that is connected to two different ports, like an ADSL modem or so, it connects to electrical network and phone line. It can still be destroyed even if protected by SPD, if enough voltage develops between phone line and mains earth. Or if there are two computers interconnected via ethernet or something like that. It is imperative to ensure that those will see the same potential in event of surge.
So for that reason, I tend to think that proper surge protection is more system level issue, than per device issue.
I prefer at least two stages of surge protection, one heavy duty at distribution panel (levels 1 & 2), and then finer and faster near the equipment to be protected (level 3). Idea is to absorb bulk of the surge at beefier device. I had a close call last summer, a lighting stroke nearby and I heard a sharp snap from somewhere in mains outlet. We have underground low voltage 400 VAC cabling, but "mid-voltage" 20 kV distribution is mostly above ground. However I haven't observed any damage so far. After that I decided to have that distribution panel level SPD installed (levels 1+2 combo), a Phoenix Contact FLT-CP-3S-350. Although that is relatively expensive, it is still quite cheap (few hundred euros) when compared to most electronics devices, or some measuring equipment which can be easily destroyed by a surge pulse. Good thing in centralized SPD is that it ensures that ground potential will rise equally at all mains outlets, thus reducing damage potential for interconnected devices.
I know one case where our customer at work wondered why their equipment broke down at regular intervals at industrial building, it turned out that all breakdowns stopped when SPD was installed. It is not the mains frequency overvoltages that matter, but those microsecond-level surge pulses, which can reach levels of kV's. Switching large loads will generate surge pulses in mains.
Regards,
Janne