Figure 3.  Client-based VPN Outside of WDS Appliances