Management VPN alternatives.

Hi all,

I want to propose a new, updated solution to our current management VPN infrastructure. We currently have the following:

• Management VPN is only accessible from inside the organization.
• Corporate VPN is (for now) the same brand as management VPN, but you can only connect to one VPN at a time.
• If you are outside the org. a 3rd party device is needed (AP) to connect to the enterprise network and from there you can VPN to mgmt.

I was thinking to propose either a VDI or HTML5 alternative to replace the IPsec client. The problem I am trying to solve is to eliminate the need of a hardware device to connect to our management infrastructure. By connecting to the corporate VPN first, you eliminate the possibility of connecting to another VPN (unless you use VMs, which this is a no/no).

I have worked with some alternatives in the past, but nothing too serious (i.e. RDP over SSH tunneling). Has anyone had experience using VDI/RDP/HTML5 VPNs for management before?