Created S2S to from physical firewall to @WindowsAzure and added Point 2 Site for some roaming clients. Works great!!