Actually, not putting administrative or sensitive servers behind a public key + certificate authenticated VPN baffles me. It's very simple and very effective.

Actually, not putting administrative or sensitive servers behind a public key + certificate authenticated VPN baffles me. It's very simple and very effective. Also has no usability problems whatsoever.