IF we have a SasS environment and want to connect different devices that are located in 25 different geographical areas (branches), to access these devices with the SaaS console is only an IPsec VPN required to each different site, or is something else required?