Remote Management Options

What are the remote management options for MikroTiks?

  • Should we open up the WinBox port on each one and lock down access to our public IPs?
  • Does The Dude have options for remote monitoring and management of devices?
  • Is a VPN tunnel to each the best way to go (seems like overkill)?

Thanks!