I knew that we can use ciscowork 2000 to monitor IDS.

1- But can I use Cisco security agent to monitor IDS as well ?

2- Are there any other software for monitoring IDS beside ciscowork 2000 ?

I have been asked by mu company to rebuild the security system as best practice, I am looking to find out where is the best place for VPN for instance ,behind a firewall or in front of a firewall ?