It sounds too tempting: You buy the best intrusion detection system on the market, have it installed and configured and then your network is protected. In this talk I explain why this is a fairy tale, what additional effort is required and why it can be worthwhile.