Him
You can have both VPNs.
For site-to-site VPN, you can terminate it directly on the edge router and you'll need only data license on the new routers and security license on the routers running older version firmware.
For SSL VPN, you can terminate it on the firewall or limited routers. You have about 100 SSL VPN licenses on firewalls by default and if any extra license is required, you can add the while ordering.
You can also have both at a time; for example, if your head-office has remote branches, they can connect to head-office while site-to-site VPN and all the users who want to work remotely, can join in using SSL VPN.
Do let me know if you want to discuss any particular scenario and I'll try to explain further.