VPN Setup - There must be a better way

Hi all,

Before Covid, we had one or two employees who access the company network via VPN. This is handled by our Draytek 2850 router and a Windows VPN profile using L2TP/IPsec with PSK. For the most part, it works fine and involved me setting the VPN profile on the router and the user's work-from-home computer.

When Covid hit, it was a mad scramble to get laptops together and manually set them all up with VPN/RDP etc. as I'm sure it was for most companies. Some of these users are still working from home. The company is also growing and we're more flexible with new employees working from home now that we've seen that it works. So if VPN is here to stay for a while, I want to automate it.

I want a VPN that can

• be centrally managed by IT - I setup the VPN profiles myself to ensure it's only setup on corporate devices which are known to be compliant and enrolled in Intune MDM.
• be automatically setup for relevant devices/users.
• be simple to enrol new users
• work with our Draytek router
• always be on and not require the user to click connect or faff about with waiting 5 mins before being able to reconnect again.
• be cloud based - I'm largely taking the company cloud based, so by next year, the server and therefore VPN will probably be a distant memory.

But for now, is there a better way? Something using Azure? Cisco Anywhere?

Many thanks in advance for any suggestions.