DMZ in VPN

If I have 5 sites that are connected to HQ via broadband or the Internet using VPN to access application servers. How would a DMZ be implemented in this case, if all 5 sites need to connect to the Internet through a single point, which is HQ?