The two sites communicate across the Internet. IPSec VPNs can be deployed at both ends of the firewall to protect the traffic between the two intranets.