I have firewall rules set up and also denyhosts installed. do I also need to install fail2ban?
fail2ban is neither necessary nor sufficient for system security. It may make bosses and auditors feel better, but a well-configured system should be perfectly secure with brute force attacks bouncing harmlessly off of them. It's also been exploited in the past to lock legitimate users out of their systems.