If you have an on-premise deployment of CUPS most deployment scenarios will require you to have VPN. If you use WebEX connect cloud service then you can connect from anywhere, but need VPN for sotphone capabilities, etc. There is a product coming up, however that is still all under NDA. Stay tuned.
HTH,
Chris