Hello all,\n\nI have a question. I am putting together a regional network for a state\nagency. Here is a basic breakdown of the network architecture I wish to\nachieve:\n\n1 Main Office\n6 Satellite Offices\n\nThe existing architecture is a private T-1 between the state mainframe and\nthe regional head office. Currently, the users of this network at the\nregional head office (a total of 7 users) use PCs with Terminal Emulation\nclients to reach the state mainframe via the T-1. That works fine and\nnothing of interest there. However, these users spend much of the week\noperating out of remote locations. There are six laptops these users bring\nwith them to these remote locations. They travel to these remote locations\none at a time, three days a week. They spend one day at the remote location\nthen move to another location the next day. Only one remote location is in\nuse on any given day. Currently, the users dial up directly to the state via\nregular phone lines to attach to the state mainframe. Due to changing\narchitectures, the state would like to do away with the dialup and move to\nTCP/IP. This means that the remote sites now must communicate with the head\noffice and THEN be transported to the state mainframe via the link from the\nhead office to the mainframe. I propose to accomplish this via DSL\nconnections at the remote locations, transport the data via VPN to the\nregional head office, and then send the data on its way to the state\nmainframe via the T-1.\n\nMy question is this: which device would be best for the regional head office\nfor the VPN? I have already settled on the Pix 501 for the remote locations.\nI originally planned to use another 501 for the head office end of the VPN\ntunnel. However, I am looking at the 515e for the head office now. Is this\noverkill? With so few users (the bandwidth requirements for the applications\nare very small, in truth a 56K dialup would do just fine for the amount of\nbandwidth required for the applications) will a 501 at the head office\nfulfill the requirements? Or is the 515e required at the head office\nlocation simply because it is the "master" end of the tunnel?\n\nThanks in advance for your time and advice.