http://networkengineering.stackexchange.com/questions/26268/... In many large networks that span nationally or globally, all traffic including Internet traffic, flows from remote sites to a central hub, such as a data center, where Internet traffic then leaves the organization via an ISP. The advantage of this is the organization can apply security policies, filter for malware, etc., from a single, central location.
In contrast, some
organizations allow Internet traffic to leave the corporate network at the remote site, via a locally connected ISP. This is known as an "Internet breakout." The advantage of this is all the Internet traffic does not need to be carried to the central site, saving on bandwidth, and the local ISP may offer cheaper pricing than the central site. The downside is that Internet filtering and malware protection must be placed at the remote site's ISP connection as well.