Remote Sites

For those of you in an enterprise setting who have remote or satellite
locations, how do you have your network access set up?

In the past a hub/spoke type model was fairly prevalent. In theory,
gives you some extra control and a more consolidated location to
deploy infrastructure at (security and monitoring tools mainly), but
introduces greater impact when there are outages as well as a latency

I like having an Internet egress point at most of my sites in addition
to an MPLS for voice and inter-site communications, but this can
complicate monitoring as it's tough to justify spending $$ to install
security equipment at every location. Perhaps could rely on a layered
service offering from an ISP?

Interested to hear what others are doing.