A financial services organisation would like to set-up a VPN that enables their staff to access company?

A financial services organisation would like to set-up a VPN that enables their staff to access company resources from home. As this relates to personal financial data, security is of course paramount. With a limited knowledge of L2TP they are unable to choose between client aware and compulsory tunnelling. Advise the organisation on which approach to tunneling they should take. Justify your advice by clarifying the difference between these two approaches and the advantages of each.

What is a VPN?

VPN is (Virtual Private Network) were first used by companies to enable their employees to securely access internal systems such as email remotely (e.g. from home or while on business trips). Today they are increasingly being used for personal use by individuals to protect their privacy while online in public places (e.g. when using the wi-fi connection in a cafe) or in a country where the internet is censored / blocked (e.g. China, Saudi Arabia…).