Need alternatives for ASA's for site-to-site VPN, and client VPN

VPN
41

I currently have split tunneling turned off, so that I can filter the web traffic, which goes out via the WAN connection at the hub.

42

Then the MX64/65 isn’t right for you. The MX84 would be more appropriate.