I have a cloud key on each site, and use the unifi cloud controller. No VPNs, no problems. Actually surprised anyone does anything else!