Intrustion Detectors in dom0: bad idea?

A post was merged into an existing topic: Help me setup AIDE and snort. IDS… Do you just unplug the VPN?