Application tunnel or portal access

folks

 

 

i have to provide a connection from a remote user (an external contractor) to a number of subnets on my corporate lan

 

 

i want to limit their access to RDP (TCP-3389) and only to the destination servers

 

 

my question

 

 

application tunnel or portal access?

 

 

i prefer the concept of portal access but i've never had to do this before so i'd like your opinions

 

 

thanks to anyone taking the time to read this or respond