We have an account with two remote sites currently connecting to HQ via PTP T1 connections and all internet traffic funnels through the internet line at HQ. They would like to instead have local internet connections at each remote site. Originally, as part of a larger network design, we were proposing an ASA5510 for HQ (with the CSC module) and PIX 5xx for the branches. However, with the standalone internet connections at the remotes, content filtering becomes an issue. Is there a way to easily provide a centrally managed content filtering solution while still sticking with this general Cisco design (and not having to deploy an ASA at each remote)?
