Forefront Unified Access Gateway 2010, offers a great SSL VPN feature set, especially when integrated into an existing Microsoft Windows network and when used to provide staff access to enterprise applications. Forefront UAG distinguishes itself from most other SSL VPN products in three ways. First, it’s a software-only solution licensed on a per-user basis. Although underlying Windows and UAG server licenses aren't inexpensive and UAG won't share a server with other apps, being software-only makes it an affordable solution when licensing 250 or more simultaneous users, especially in organizations that’ve volume license agreements for Windows server. Second, UAG provides some app layer firewalling capability. Most other SSL VPNs provide only minimal app-layer inspection of content, focusing on correctly rewriting URLs rather than blocking potentially hazardous URLs. UAG goes beyond this by providing some URL syntax checking, which can protect against some types of attacks, such as SQL injection. Third, UAG includes Microsoft's new DirectAccess technology, an IPv6-based feature that can simplify end-to-end VPNs by reducing the need for VPN gateways and easing the deployment of remote access VPNs across a Windows domain.
More info: Microsoft delivers feature-rich SSL-VPN