What are our options for remote IP phone off of an IP office, customer wants to use 9608G:

Port fowarding?
VPN / Ipsec client built into the phone
SBC if we use SIP phones? Is that correct?

Customer is convinced there is some other Avaya part (I call a MAGIC box) that will auto associate phones remotely. I am unaware of such a device. System is preferred edition, R11.

Customer currently is using vpn appliances at user's home office and doesn't like it.

Phone systems for NJ and NY businesses