This is a bit of an open ended question. As far as the number of concurrent users, it really depends on what each user is doing. I've seen Tomcat handle thousands of users at the same time but it was a pretty simple site. So the answer to your first question is "it depends".
The security provided by Tomcat matches what J2EE specifies. Tomcat can support SSL directly or indirectly by using an Apache httpd front end. SSL helps to prevent session hijacking. Otherwise, I guess it depend (again) on what you're looking for.
<a href="http://forums.hotjoe.com/forums/list.page" target="_blank" rel="nofollow">Java forums using Java software</a> - Come and help get them started.
Joined: Feb 28, 2005
Thanks Scott for your Quick Replay
we are like to develop a new project.project is little bit big.big in the sense number of tables and transations are more than 200.
due to the budget we are analysing which server is best. cheap and good. i would like to know servers and capacity to hold the transations and security.