But let me share what we do when we don't use VPN. We install OpenSSH on a server and open that one port to/from the internet and that server.
While it's not friendly we consider the security concerns to outwiegh the friendly aspects today. Never give them an easy target.
You can also invest in VPN routers and servers. But since the usual maker's websites suffice on that (as well as wikipedia) I'll pass on writing about VPN.
I have an organization with a small network, maybe 10 PCs and a Windows 2000 server. All workstations are XP.
I'd like to setup remote access to files from off-site. I was considering VPN, but it seems you need two servers. Is there a simpler solution for a small network? We just want to be able to view and edit files from off-site.