I want to deploy WAAS between a head office and a DR site, they will either connect through a private WAN or the Internet. A requirement is for the traffic to be encrypted and as such IPSEC VTIs will be used to enable routing as there will also be a back up link. I am thinking that traffic would be optimized before it is routed and passed through the tunnel. Is that the case? Can this work?