Yeah, ok, the current plan is to just bite the bullet and buy the client licenses for their proprietary VPN client software, and not worry about this any more.

Thanks for all your help, Bitt, and everyone else.