Yes. Boingfire can serve as a branch gateway that terminates site-to-site tunnels and enforces segmentation between local networks and the VPN overlay.