Router vs. FW site to site solution?

["King, Gregory" <cxz9 () cdc gov>]

There is a requirement to implement remote access for users across the
52 states.  The data that will be accessed is considered SBU.  What is
the typical solution for this type of requirement?

Do I provide bulk encryption via the router or FW?  Which is the
preferred method?

Please advise.

Regards,
 
Gregory A. King Sr.
KMT Security Lead
 
"A Security Risk Is Inevitable, You Can Mitigate, Ignore or Accept It."