what device might be installed at a branch office

Which device might be installed at a branch office to enable and manage an IPsec site-to-site VPN?