I have forgotten to mention this point. The main reason for avoiding internet based automation for remote sites is, every site needs an IP address. VPN routers can help but again automating this process for 1000's of sites from CCC needs a very reliable VPN service provider which is very expensive. Where as, a private mobile network data channel gives private IP by default, deployment is very fast, 100% secured and connectivity is instantaneous. No need for any VPN router or Dynamic DNS. Downside is cost and limited bandwidth. Both can be very well controlled as discussed above.