ERL to ERL site to site VPN

I have an IPSec VPN set up between two ERLs, A and B.

A is the headquarters site, B is a branch office.  How do I ensure that all Internet traffic from B goes via site A before routing out the the Internet?