Got it. In band L3 with either virtual gateway or real IP gateway will work in my environment.I suppose I should setup site to site VPNs between the HQ and these branch offices. On the HQ's ASA device where VPN tunnels terminate, I should forward a...