What should we be doing?

• Prevent attacks on your network

• Detect strange behavior

• Detect wrongful settings

• Detect viruses

• Detect malfunctioning hardware

• Detect other maintenance warnings

• Guard the policy