Hub vs Direct ISP

[jp0801]

I am debating on what method or best practice to follow in the following area:

Off-Loading non critical traffic

1. Do I hub my traffic by creating a GRE tunnel back to a hub site that has an ISP connection?

2. Do I install a F/W at the site?

Traffic is primary 50/50 of non critical traffic vs critical traffic.

3.Do I look at existing circuit speeds and say anything over a 512k connection gets a F/W. I know there are many factors so I must assume that internet traffic and data streaming applications will continue to grow, but I can't see myself putting F/W's at sites that only use 128k worth of HTTP traffic.

Any assistance would be greatly appreciated.

Thanks

[ivillegas]

You can have a firewall instead of a GRE tunnel.Aas GRE tunnel involves time-delay. You will also know the misuers and intruders for the data. By using of Distribution layer switches and routers in the range of 2600 and PIX 515 will suit your need.