Few teleworkers should ever have access to all corporate databases. Limiting their access will also limit access to anyone who breaches the teleworker's security system. The only differences in policies should be those required for remote access. Limit VPN to the teleworker's profile. Ensure the accounts created by your teleworker for friends and family do not have VPN access.
Distributed firewalls are one of the more intriguing offerings.
Check Point Software's offerings are beginning to mature, and the company offers one of the most comprehensive sets of security solutions for corporate environments. The VPN works with the firewall. If it detects evidence of tampering in the firewall's rule set, it refuses the VPN session. Another outstanding offering is Sygate's Enterprise Network, which won a Blue Ribbon Award in our review of personal firewalls last year. Their latest firmware allows IP Security passthrough, and the unit's four ports also let other family members use it.