El Diablo,

Do you mean Okena Stormwatcher? I didn't read much about it, but it appears to create its own signature of "normal" network activity, and then base its alerts on any activity which falls outside that scope. Sounds really interesting, but MY network always has odd things going on. If it starts alerting or blocking activity all the time, it would get a bit annoying, even counter productive.