We have several sites connecting to us via ppp (t1). They are connecting with cisco router w/basic ACLs. The remote sites are not externally accessible by people outside the company. Do we really need to implement firewalls at every remote site (behind the routers)?
I'm thinking no, since they are technically part of the internal network and there are no high security things being transmitted.
Just looking for best practices here.