4 ms·

The Duo Network Gateway can do this with Trusted Endpoint certificates. (I work there as an engineer.)