Can OSSIM monitor external hosts at a remote ISP ?
This depends on various factors. The answer would be yes under the following circumstances: You are able to install and run software as root on your remote host. The ISP agrees to place a sensor for you and gives you access to the data it collects. You only want to monitor access to a hosted site and additionally correlate some apache, ftp and other application logs to which you have access too.