Want remote offices to send ALL traffic to HQ via IPsec VPN- is this possible ??

[talbotc]

We would like to make our remote offices send all traffic across an IPsec VPN between their office and our HQ for centralized AV, web filter, spam, etc…

We can't use pfSense if this is NOT possible.
Does anyone know if this is possible and if so, able to explain how to configure the pfSense to do it ?

I have attached a drawign that depicts our goal.