@efa2e20e you're welcome. A less intensive option is always on vpn even during pre-boot. Issues with the certificate based authentication, but stateful user based authentication is just a login away. All depends on where you want your risk. 

 @068f6204 I’ll look into it next weekend , it’s not urgent for me