Client wants to permit VPN access but control access to a specific HR application. In other words they do not wish for one level of employees to have access to the HR application while away from the company. Company employees currently use Cisco AnyConnect VPN v2.x to work while on the road or at home.
