We only allow appliance to appliance VPN(site to site). We don't do VPN
to end users that are not a part of the domain. Maybe that's what you're
looking for. Having end users connect directly to you sounds like you're
putting yourself into a PC troub...
