b) Firewall logs: I don not need a graphical frontend at this moment. With tcpdump is sufficient. But, how can I upload logs in secure manner to managemnet server and how can I administer this logs (i need to do some searchs, etc)?. Is syslog my unique option??
There are good articles at <http://www.onlamp.com/pub/ct/58> which deal with this.