Thank you for the reply :)
You probably don't need one. Just be sure to keep programs like tripwire, network monitoring, and special alert stuff on so the system will tell you when it thinks its using to much memory or processor or something...
For political reason, we MUST implement something. Nor would anyone be available to monitor over the weekend (business doesnt want to pay for a cell phone or isp for me.... ok then, I WONT keep an eye on thing over the weekend.... sure - its just how they think). Anyhow... could you go into more detail on the network/services/logging? Keep in mind the box will be behind our (already restrictive) firewall, root will (obviously) not be logged on, and vsftp will run on a very underprivledged account..