A virtual private network gateway (router, firewall, VPN concentrator, or security appliance), such as the Cisco Adaptive Security Appliance (ASA), is necessary at both sites in order to set up an internet-based site-to-site virtual private network between them.