Ah, in that case yes I see what you are doing and would agree with @ConnorLeedy that I would be deploying it in one-arm mode.   Although personally I would be deploying a vMX in Azure any letting all my branches talk to it directly - but I presume you have your reasons to not do this! ... View more