I happen to (as of recently) work for a company that makes really excellent and powerful VPN software, but your attorney sounds like he's looking for something super cheap, which we ain't.

Keep in mind what the purpose of a VPN is: To connect someone who's outside the firewall, to your internal network, and do it safely and securely.

Every piece of VPN software will do that, and it's even possible to set up a VPN without spending any money at all (Server 2003 has an IPSec VPN built in; it's just a pain to set up.)

A VPN doesn't solve your client/server licensing problem unless the client licenses are free. Are they?