Reference architecture for VPN infrastructure using BIG IP?

if you want to configure VPN for normal Employees better to configure Zero Trust Application Access using APM portal access with AD auth and OTP even client side compliance policy that assigned to Application Tunnel and Portal Access or even RDP policy to use their organization PCs such as below example from F5:-