John is responsible for security devices at his company. He is concerned about DETECTING intrusions. He wants a solution that would work across entire network segments. However, he wants to ensure that false positives DO NOT interrupt work flow. What would be the best solution for John to consider?