A company has 300 remote employees who each need an encrypted tunnel into the corporate network to access internal file shares and applications. The network team wants a single dedicated appliance that can terminate and manage all of these simultaneous encrypted connections while enforcing authentication policies. Which device best fits this requirement?