Ipsec vs openvpn vs tnc

[kapara]

Looking to deploy pfsense in multiple environments but behind customer networks and need vpn tunnel back to central location.  I will not have a 1:1 nat all the time so I prefer a solution which will work behind a customers existing firewall with NAT.

I need a router and vpn solution and was hoping I could continue to use pfsense for both as a solution rather than break this up into several components.

[jimp]

For that situation I prefer OpenVPN since it generally has an easier time punching out from behind random end-user networks.