Hi,
For this kind of case, normally, I anticipate the connection comes from internet cloud which refers to remote access.
Since we have managed firewall services that associated with customer VRF, on windows based client, just configure/enable PPTP/IPSec on client - like most laptop or maybe perhaps pda...
cheers..
maher