To work remotely, you will need remote access (VPN token) if you require access to file servers or internal applications (i.e. Cisco phone, Oracle, Internal SharePoint, Gemini, Jira, etc.).
You do not need VPN access if you access applications such as Teams, Outlook or applications listed under MyApps (i.e. Workday, Workforce, Concur, IT Portal, CAEchampions, etc.).