What will it be used for? G2G, C2G, C2C... Their may be other option depending on how they need to access what.
I've been playing with a Microsoft RemoteApp server which uses an accessible from anywhere SSL tunnel -(TLS version whatever you like )- that can make virtually any application available to pretty much anything. I even got our internal LOB application to run on my cellphone acceptably for quick stuff in a pinch. It leverages (desktopless) RDP for the delivery mechanism so iOS and Android devices can be used to access internal resources as well.
He's a consultant. Helps companies come up with their sales commission schedules and policies. Interesting business to be in because it's as much art and politics as it is science. He doesn't need much in the way of file transfer/P2P although he has an Office 365 Pro Biz account so he has all the cloud storage and access he needs.
I'm mostly concerned with him accessing the web, reading email, etc. when he's on the road. Some of his text files and communications are sensitive. And the only point of vulnerability he still has when using his Surface is that on ramp to the big bad web. Hence a purely mobile VPN solution. I've already got his home office network secured nine ways to Sunday. If he's behind the router I've done up for him, he's as secure as he's ever gonna be. And that's pretty damn secure.
No need (at this point) for RDP or RA. He's not going to be hosting anything himself. He's got a budget and he knows about running a business. So we're not going to be getting into any science faire
or homebrew guerrilla networking for this guy. (Which is nice for a change if ya know what I mean.
) If he needs something, he willing to pay what's needed to do it right and without the need for him to keep calling me for explanations or assistance on day to day things.
More precise requirements for the VPN:
- Very secure
- Known provider with good rep
- High availability and decent throughput
- Cost not a significant factor - he expects to pay for it (which always simplifies service selection )
- Fairly easy to use. (As I said, he's very smart and a quick study - but he ain't one of us. He's more interested in the solution than the technology driving it.)
who's made suggestions so far: Thanks! I will look into your suggestions and recommendations.