With the list of SKU's provided below, I'm wondering if it possible to:
- have the pair of ASA 5510's running in Active/Active, (with or without stateful failover) that are also running the Content Security and Control Security Services Module (CSC-SSM) at a company's main site; AnyConnect (Essentials), & with VPN tunnels from the 5510's to 3 remote branch sites with an ASA 5505 on the other end (1 at each branch office)?

If not, what is the most cost effective way to meet these requirements?

List of SKU's:
----------------------------------------
2 x ASA 5510's (CSC-SSM Bundle, Sec+ Add-on, & AnyConnect Essentials VPN)
- ASA5510-CSC20-K9
- L-ASA-AC-E-5510
- ASA5510-SEC-PL
- CON-SNT-AS1C20K9

3 x ASA 5505's (remote sites)
- ASA5505-UL-BUN-K9
- CON-SNT-AS5ULBK9


And as a separate but related follow up - what if the customer wants IPS as well and the following SKU's were tossed in the picture:
1 x ASA 5520 (with Advanced Inspection Module -AIP)
- ASA5520-AIP20-K9
- CON-SU1-AS2A20K9