which device might be installed at a branch office to enable and manage ipsec site-to-site vpn