Why don't you look at re-architecting? Have you looked at having an SD-WAN architecture with the ability to create and SD-WAN overlay over your private underlay and also allowing localized internet breakout for SaSS and Internet traffic? ... View more