I am going to setup a dedicated server running windows server 2012 and hyper-v. I want to setup some sort of vpn that would prevent rdp access from the public internet (i.e. you have to establish vpn first to reach the server via rdp).
I know that windows server has options for this, such as rras and direct access, and forefront (an option) can do this (I think). Are any of these viable?