If you are virtualizing critical workloads, you want to ensure they do not fail if a host goes offline. All common platforms offer the capability to operate VMs in a high-availability cluster. Proxmox allows you to install a cluster even in the free version.

Proxy server settings can be automatically deployed to clients using the Web Proxy Auto-Discovery Protocol (WPAD). This protocol utilizes a Proxy Auto Config file (PAC), which can be provided via IIS. A Group Policy setting instructs web browsers on how to find the PAC file.

If you are using an OPNsense firewall, you can configure WireGuard as a VPN server instead of OpenVPN. There are clients available for all major operating systems. Additionally, it is very fast and lightweight. You can easily install it as an OPNsense extension and configure it through the web console.