Alert Profile's

I am busy playing with the Alert profiles. i have setup a basic one to warn me if any protocol exceeds10000 hits with on a hour to warn me.

This worked well when we had a DNS attack.

I am just wondering what other Alerts suggestions anyone has for firewalls.
I have not intergrated this with VPN / Squid yet.

Just looking at firewalls right now.