<{p}>An existing NGFW customer requires direct internet access offload locally at each site and iPSec connectivity to all branches over public internet. One requirement is mat no new SD-WAN hardware be introduced to the environment.<{/p}><{p}>What is the best solution for the customer?<{br/}><{/p}>