At Branch office you will not always use ASA for security
and VPN connectivity with Central office, best way is to use router that you
already have at Branch office using Access control list.
This approach is best for this scenario, you can change, add
or modify for your needs.
