Our business has about 400 associates who have to travel, and consequently use public Wi-Fi hotspots almost daily. It sounds like "best practice" dictates we should have them connect to a VPN to prevent sniffing, but the corporate VPNs I have looked at seem to be geared towards allowing remote users to access corporate networks, which isn't what we need. We don't have any useful resources on our internal network. We use G Suite (a.k.a. Google Apps) for storage and file sharing, and a couple industry-specific web apps.
I don't want to tell them to just use any VPN, because then most of them will probably install a free VPN client that also installs adware and logs your banking passwords.
- Paid VPN service (I don't think we can trust a free VPN service), but hopefully cheaper than full-fledged VPN for accessing corporate resources. Basically just a "hotspot shield".
- Preferably hosted in the United States
- Easy for remote users to install and use - these associates are independent contractors, using their own machines, so we can't mass deploy it for them
- Doesn't harvest data
- Redirects all network traffic on machine through the VPN tunnel, which I think means there has to be a proxy at the other end? I'm not sure if I have the terminology right; feedback here is appreciated.
- Hosted: we don't manage any servers now, and I don't want to start.
- Support for SSO would be nice - for example, if it supports SAML or OAuth 2, we can have them sign in to the VPN with their existing G Suite credentials.
- If it can be installed as a Google Chrome extension, we can mass-deploy it via G Suite's Chrome management
- If the traffic is assigned a single, static IP at the end of the tunnel, we can maybe beef up our security for our custom web apps by having them only accept traffic from that IP address? Let me know if I'm misunderstanding how this works.