Yes, it is also possible with the MX. Your mentioned benefits are real, but the drawbacks of the MX for extranet VPN are also often relevant. You won't have a single license renewal if you place the MX in a different dashboard org. But the rest should be fine.
... View more