Figure 1. Backhauling Internet traffic through a Datacenter This is typically done because the cost of installing and operating a security stack in every remote location is very high.
The returning traffic also traverses the security stack before it is sent back to the remote site. Then the traffic is pushed through the company's security stack and only then it is routed out to the Internet. In traditional wide-area designs, Internet traffic from remote sites is sent first to a centralized data center or hub site.
