I like to have HIDS and NIDS incorporated in the Controlpanel with live monitoring.
Like Snort, Suricata or Sagan. Or integrate one or more of those 3.
We use ASL from atomicorp. It costs $199/year/server but contains HIDS, mod_secure kernel protection and a ****load of other stuff.
Way better then something integrated in the controlpanel.
I highly recommend you try it, feel free to contact me if you have any questions.
thanks for notifying