I agree with Phillip. We use DUO mobile (first ten users are free) We pay 3.00 a user monthly, they use the built in Windows 10 client. You can have it authenticate against your AD and use MFA. DUO has multiple group policies you can set up. I like DUO for the log report, when a user says I cannot get on the VPN, I go to DUO log and see they never accepted the DUO push.
... View more