A company acquires a small regional office with a fixed public IP address and needs to permanently connect its subnet to the corporate data center. All traffic between the two subnets must be encrypted transparently, without requiring any client software on the office workstations. Which VPN deployment type best fits this requirement?