We run ServiceDesk Plus on our local network, but would love to access it from the outside without the need for VPN.

Because there's some moderately sensitive information in the tool, I want to protect it with more than just usernames and passwords.

Has anyone had an experience with locking it down further? I see two options:

1. Requiring a client SSL certificate to be installed; this would lock it down to specific machines with that SSL certificate.

2. Using some sort of two factor authentication.

Any ideas?

--Mark.