We have two primary sites (HQ and DR) and many remotes sites. All sites are using the ASAs as the STS VPN endpoint. Remote sites have ASAs only, no router or layer 3 switch lays behind the ASA unit. We are trying to use the best setup to provide r...