I'm planning to create a new site-to-site VPN tunnel. I have a 2811ISR on the office end and the remote end will be roaming around the world for the trainers to carry, which means that this remote end will be using a dynamic Public IP wherever they try to connect from. I have a spare 3002, but I need to provide more than 1 appliance for all of the trainers to carry with them. What would be the recommended appliance for this type of set-up?
Ahh ok, thanks for the clarification.
The VPN 3002 is End of life now, so you cant buy those. Same is true for the smaller PIX boxes. Your best choice would be the ASA 5505 now. Its also looks pretty nice and is handy to carry about :)