Advice on using intrusion detection

[Erik Lauritsen]

Is it recommended to run some kind of intrusion detection on an OpenBSD 
router/firewall?

I suspect that any kind of system like Snort or Suricata will give a lot of 
false positives?

Kind regards,
Erik