Hello everyone! And apologies, I'm a bit new to this..

We have a 2860 router at our office, and several staff who need to connect from home to our office (from non-fixed IP addresses). We would also like to ensure that the majority of their traffic uses their own connection rather than going via the VPN. (I've tried setting up an IPsec connection using ShrewSoft as the client, but I can't get the routing policy to exclude web traffic from the vpn connection).

Please can anyone suggest a combination of connection type and client software that will be;
- as secure as possible
- as fast as possible
- allow our staff to have non-fixed IP addresses
- prevent routing of web traffic down the vpn

Many thanks for any assistance
-Mat