[donshoutarp]

Generally remote firewalls will want to send the logs to a public address. The default set-up is to not use a VPN that you set-up between the firewalls. The log info is encrypted btwn the firewalls and the log server.