Authentication: Multiple Authentication type per-user
Activate multiple authentication mechanisms (Agent + Browser). Normally a user uses his own machine (Agent), but sometimes he is on another notebook/pc where no agent is installed, so he can't access other subnets and/or internet. With an alternate (additionally activated) method he could open the browser, type in his credentials and access his permitted resources.
Bob Alfson commented
Manuel, have you looked at the beta forum on http://www.astaro.org/ to see what is being done for Clientless VPN? Would that offer you what you need?
Cheers - bob