HI Sindy,
Yes I like simple!!!
BGP peering and data flows through GRE tunnels and IPSec will encrypt everything with a GRE header. No GRE header, no encryption. GREAT!!!
On we go … I’ll be back
BTW, any config tips to get started 
?
Thank you
Frank