Thanks to SQLBill, Ron and Karl for your recommendations.

If I set up a VPN, it would presumably  inside the firewall on the SQL Server end and the SQL Server would appear to...