I am actually working on build something similar. So, you could roll out an app-specific VPN like secure tunnel real easy. It is inspired by the work at Google IT called BeyondCorp [1].<p>The target market is companies whose employees require secure remote access to internal apps, but IT does not want to give a broad network access via VPN. So, marketing&#x2F;sales like employees who simply want to access internal portals, etc. without the hassle of dialing into a VPN.<p>[1] <a href="http:&#x2F;&#x2F;research.google.com&#x2F;pubs&#x2F;archive&#x2F;43231.pdf" rel="nofollow">http:&#x2F;&#x2F;research.google.com&#x2F;pubs&#x2F;archive&#x2F;43231.pdf</a>