We have a webserver which is hosted outside our office.
The firewall of the server limits the access (ssh, sftp, etc) by ip; only the public static ips of our office can access it.
Our problem is that the responsible person has to come to the office to work in case of emergency. We would like to find a solution to allow him to work without the location constraint.
Unfortunately our VDSL router (Zyxel P-870HN-51b) has not VPN capabilities.
We were simply thinking about buying a firewall (ZyXEL ZyWALL USG 40) and have it setup in our office so the remote employee would "get" a whitelisted public ip.
Is it a safe solution? Or would you advice something totally different?