Beyond the VPN: Replacing Legacy Remote Access Without Disruption