well, i briefly read the manual and it looks like the phone can actually have its own vpn client built in. I did not know that. I wouldn't try loading this firmware myself. I would still go with a hardware vpn/router appliance. The added benefit of the hardware based vpn is that they can link multiple PCs and phones back to the home office. Also even if they load the VPN software on the phone, you will still need a VPN endpoint to link with the phone. This could be the BCM itself (with VPN capability) or a VPN appliance back at the home office. In my opinion, It's what you support that counts, not what the manuals say.