Question about IDS [CLOSED]

[jamlydm]

I have an Artica Server Appliance with: FileSharing, MailServer and SQUID with only 1 network card.
May i install IDS with Snort in this Artica Server? or I need to config another server?

In my network i have 16 users, almost 25 (PC and servers).

[admin]

IDS should most likely used when your server is connected in front of Internet (web server, mail server, VPN server or any Artica in DMZ)
IDS is necessary for Microsoft Windows computers against trojans that trying to attacks Windows security holes.
But Artica is stored on a linux server that don't care about Windows viruses so it is not necessary to install IDS in a LAN.

[jamlydm]

I was thinking that IDS was to detect not autorized access in a network.

OK let me explain you what i want. I want in my network to analyze the traffic and determine if someone that is not my user is in my network.

Sometimes come people to the company and i think they use my network or maybe they are doing something that makes my network slow. I think they have their own dns or mailserver, how can i monitor my network in that way.

I want to know if there is new users in my network that i dont know or what my users are using in my network.

What can i do? I feel as i dont have control or i dont know what is happening in my network when people is connected.

[admin]

This is not IDS that match your request

it is planned to implement this feature, i will add my post myself to remember this
viewtopic.php?f=12&t=4039&start=0

[admin]

Added, see this post
viewtopic.php?f=12&t=4039&start=0