From the point of view of the network, a modern facility can be just one access point connected directly to the WAN from the provider, and there are enough resources on this access point to raise the VPN tunnel to the headquarters, and for NAT, and to configure restrictions for customers and for basic protection of customers and employees. No, but really, why should an expensive security gateway be built on a small facility where the network infrastructure is completely wireless? Modern ...