Resource Manager Essentials should work as long as you have TFTP, Telnet and SNMP opened up on the firewall. Also, if you have TACACS you will need to open that as well.
The port for logging (syslog) us UDP 514.
Other ports that are used by Commmon Services can be found at this link:
http://www.cisco.com/warp/public/477/ports_oncd1.html
DFM uses the following ports and protocols.
Ports:
162
9000 (if port 162 is occupied)
9002
Protocols:
SNMP
ICMP
TCP/IP
SMTP
However, Campus Manager will be more difficult because of two issues:
-- It uses random ports over 1024
-- If there are firewalls between devices they will not show up properly because it maps the network through CDP. As CDP is layer two you can't open it on a firewall