Have an Ironport behind an ASA, the ASA is configured for WCCP on the inside interface and the Ironport does web filtering.Have some remote sites which have 2811's connecting to the ASA over an ipsec LAN2LAN vpn.The 2811's have a T1 to the internet, ...