Generally, the SNMP thresholds for WAN links utilization should be between 60 and 70 %. That is when the link utilization crosses 60 or 70 % an alert should be generated, for CPU and memory utilization again anything above 75 % of CPU should generate an alert. If the link utilization is always above these thresholds then you must think of upgrading the links. If it is bursty then it can be considered as normal.