implementing site to site VPN solution with firewall and filtering.

Idir,

Red and another XG are 2 different kind of solutions.

With red you can manage your remote users centrally, enforce them to use internet at central location.with red you cannot filter remote users internet usage (using internet at their location).

Another XG at the remote site instead will manage internet at remote location but you need to manage it separately.

Red also allow to create layer 2 tunnel.

Thank's for reply,

this answers my question

I do not want to share my internet connection in the first site with the remote site, and I would like to have a total control of the internet trafic.

donc je me suis pas trompé de solution, il me faut bien deux Appliance distinct 

regards 

lferrara wrote:

"With red you can manage your remote users centrally, enforce them to use internet at central location.with red you cannot filter remote users internet usage (using internet at their location). "

That's cryptic!  When you enforce red users to use internet at central location (=central XG) , then you should be able to enforce internet usage filtering as well

Sixteen,

who has no experience with RED, most of the time they understand that with RED, they are able to filter traffic using their own internet, which is not correct.

RED users will always use the RED tunnel to reach the Headquarter location and use the HQ internet to suf. Of course in this way traffic is scanned and controlled by the XG/UTM9 at the HQ location.

Regards