The answer is Direct Access.
Direct Access allows remote clients to connect to internal servers. You do not necessarily need to initiate a VPN connection. Clients will be able to access internal resources using Direct Access as long as they have an internet access. It was introduced on both Windows Server 2008 R2 and Windows 7. Once configured on the clients and servers, it is clearly invisible to the clients.
