Scenario: My client has multiple sites that connect to a single POP via IPSEC tunnels over the internet. Each site has two tunnels to the POP, one for internet traffic and other for production traffic. The internet traffic breaks out from the FW at t...