Dont know. maybe I was to unprecise....
I basically am asking if a SSL-VPN solution is solving both the encryption and the authentication, like that the user authenticates himself to the vpn-client with a certificate and by setup of the vpn-solution this will solve both the need for encryption(vpn with tls) and the strong authentication.
example: a user authenticates to the vpn-client on his client machine by use of 2fa, a smart card with his credentials, the vpn-client sends this data to the vpn server where the client is authenticated, a vpn-tunnel is created for this session. On the internal network the users credentials sent in the tunnel will be handled by authorization mechanisms against some kind of repository, an ad etc.
is this a feasible solution?