Your organization hosts virtual machines (VMs) on Microsoft Azure within a single virtual network named VNet1. There are remote employees who need secure access to these VMs. What is the most appropriate method to enable secure remote access to the VMs on VNet1?