Duda Saas with infrastructure with 25 geographic areas

IF we have a SasS environment and want to connect different devices that are located in 25 different geographical areas (branches), to access these devices with the SaaS console is only an IPsec VPN required to each different site, or is something else required?