Cisco recommends the Cisco Security Manager for all security device management including firewalls. It supports IPS appliances, and security features on routers too, such as VPN, access-lists, and AAA.
Cisco splits Management and Monitoring. The above software is used for Management.
For Monitoring, Cisco recommends the CS-MARS appliance. Especially for networks where there are multiple security devices. CS-MARS can actually correlate security information (like syslogs and IDS events) into a "big picture". It presents the information as what is going on in the network as a whole, in addition to any particular device.
I can't say for sure on the 100+ users. We're typically at about 10 users here. But considering the robust workflow mode it has, I wouldn't be surprised if it could handle that. It would probably depend on the servers hardware specifications. I have seen deployments of CSM that contain more than 1500 devices. But yeah, can't say for sure on the number of concurrent users.
The CSM Java Applet should have no problem across a VPN tunnel. To be more accurate, it is a java based application that installs on the client side. That CSM client application uses https (or http) protocol to communicate with the CSM server, so it is encrypted and lightweight.
The CSM runs for 90 days without a license, you can grab the software here if you have a CCO account:
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...