Btw: don't forget to use on premise firewall/adblocker DNS server, like PiHole (e.g. on a Raspberry)
And if you want, use monitoring softwares, e.g. Nagios, Zabbix
But if you want to be more sophisticated, use ELK stack (Elasticsearch, Logstash, Kibana) with e.g. Suricata network monitoring