Hi, first question , are these remote locations connected to the Internet via a single egress point at the HQ
Secondly , do you serve DHCP centrally or at each of the remote sites ?
If your response is no to the first question, then you would require a separate ForeScout…