An existing NGFW customer requires direct internet access offload locally at each site, and IPSec connectivity to all branches over public internet. One require...