I believe there are also solutions out there for software firewalls that allow the software to be "pushed" and updated across the net as they connect. This way, you can configure and update policies, as well as gather some statistics on their connections/traffic. We were actually looking at a solution of this nature involving Zone Alarm. Some VPN servers support this feature also.