I'm running a combination of Cisco Anyconnect(super easy installation for end users), physical boxes with IPSec tunnels, and Cisco IPsec Clients.
All of them work fairly well. The reason we went with the Anyconnect for the main solution was the automated installation feature.