We have VMware 5.5 and Windows server environment. Currently we have very little control of our WAN, as it's a ISP managed router and Firewall, so anything we do has to go through a ticketing process with 24-48 turn around time. We are leaving this provider and bringing most if not all in house. What I need to do is put some VMs and a couple physical PCs in a secure remote access environment, but yet still have access to administer and pull information off, when a user has completed a project. I'm currently configuring and securing RDP as much as possible to the physical machines but tends to be tedious. We have source code we are trying to secure as the developers work.
If anyone needs more network design information I can provide.
I'm wondering if we put something like a Sonicwall firewall in place, can I accomplish this with a DMZ or another configuration? Ideas?