@RadyMohammed the number of clients in the sizing guide is a recommendation, not a hard limit; whereas the throughput figures are basically a hard limit (depending on your traffic mix you may or may not hit those figures).   If you think you might do SD-WAN then I’d consider a larger box at HQ there will be two tunnels from each site, which doesn’t leave much head room. But if the servers are all at HQ, then most (if not all) of the traffic is going to be initiated from the remote sites, so the traffic (and people) at the HQ itself is largely irrelevant.   I’d normally position a minimum of a MX84 at HQ in this scenario, but you may be able to get away with something smaller. Maybe try the MX67 - it still only supports 50 VPN tunnels, but it is a slightly more powerful box. ... View more