I've been tasked with redesigning our company's WAN in North America. We have two offices in the U.S., one in NY and one in the midwest. We also have offices in Europe. I won't be touching anything in Europe, with the exception of joining the Euro WAN with the U.S. WAN.
The current topology is as follows:
We have an offsite hosting facility in PA where the WAN, globally, ties together. The internet connection for the two US sites comes in through here, via a PIX firewall. Internet connectivity to NY is fine, but to the midwest office there are latency issues. Each site connects to PA via a T1, and all traffic, both network and internet, is carried over these T1 links.
The future topology:
The off-site hosting facility will be done away with and will in effect be moved to our midwest location. This is where the tying together of the WAN will occur.
I'm looking for suggestions as to how to best design this in terms of speed, cost, and security. Currently, we only have one point of access to the internet in the US, which is via the off-site hosting facility. I'm thinking that for the sake of providing a fast, reliable internet connection to each office, it would be better to have individual connections to each site instead of having one net connection going to midwest, and then pulled over the WAN link to NY. Business class cable connection is what I had in mind, each with their own firewall of course. Then, connect the two offices together with a T1...or are there faster, equally reliable, and less expensive methods to connect the two together?
Please poke holes in my ideas, as I need to better understand what's available from a design perspective.