PPTP or IP Sec

PPTP is less secure than IPSEC. It also depends on how you want to have him connect to the LAN network (dialup or through the internet). IPSEC has the possibility to use client and server certificates, so sniffing the account and password is not possible.

1) Depending on the size of the business you work for, you need to know what you may spend. Also look for scalability and support when buying.

2) Firewalls are sometimes equipped with vpn connections. Check out if your firewall has this. If you dont have a good firewall, check out the linux firewalls that are available (Commercial: Astaro, Mandrake MNF,
'Free': Something like Ipcop or FreeBSD.

Pro: Commercial: Support and IPSec possibilities.
Free: well... it is free...:)

Con: for both you need a system to run it on.
Commercial: can be quite expensive.
Free: well.. no or only email support, depending on the firewall you choose.

If your network has windows (2000 or 2003) servers installed, you can use them to create a RRAS (VPN) server, but i would only recommend this IF you use it as a dialup connection (not through the internet).

There are also many hardware solutions that enable you to just create VPN connections (or firewall with VPN connections. Some of them are not expensive, but just like most of these solutions, the cheaper, the less secure they are.

I would recommend you to look at Hotbrick. http://www.hotbrick.com/. Firewall VPN 1200/2 can be a good choice.

Like I said, there are lots of possibilities so I would recommend you to look around before you buy.

The laptop he uses can just use the VPN function in setting up a network connection in Windows 2000 or XP.

You don't mention what OS is involved, but here are some TechRepublic articles that might help you:

[b]Discover the new IPSec features in Windows Server 2003[/b]

https://www.techrepublic.com.com/5100-6345_11-5167837.html?tag=search

[b]Tech Tip: Implement an IPSec VPN with OpenBSD[/b]

https://www.techrepublic.com.com/5100-6350_11-5109801.html?tag=search