SecurID
Which is fine if there's already a VPN in place that can take advantage of it. The thing is, if the network wasn't built to be secure in the first place, it might be hard to identify every possible insecure corner. You could work really hard to protect the VPN with SecurID, and still find a back door in a wireless router someone put in on the 3rd floor to get to a printer.