If you're serious about protecting "at rest" data in all scenarios including protecting the mdf and ldf should someone get access to the server's file system then TDE is the way to go. If at rest only means protecting backups to your manager then you could go with a backup solution that can encrypt backups as they are taken, maybe something like Red Gate's SQL Backup Pro.