A company has a large number of employees that need VPN access from home. Which of the following is the BEST solution for deploying and managing the remote access?

Site-to-site VPN connects two fixed network locations (such as two offices) using static tunnels and is not designed to support a large pool of individually connecting remote users.

A network-based firewall enforces perimeter access control policies but does not provide VPN remote access functionality for home users.

SSL VPN leverages TLS/SSL on port 443 to create encrypted tunnels accessible through a standard web browser or a lightweight client, eliminating the need to install and configure traditional VPN software on each employee's device. This makes it highly scalable for large user populations, works through most firewalls and NAT devices, and significantly reduces administrative overhead for deployment and ongoing management.

A host-based firewall protects an individual device from local threats and does not provide or manage remote access VPN connectivity.