What is the best and recommended solution to expose SharePoint Intranet externally in a secure way?

Hi All,

I know there are number of solutions out there which can allow you to expose SharePoint On-Premise externally. All solution come with some limitation. I am looking for someone who has implemented such a solution and lesson learned.

Here is the high level requirement:

– SharePoint Portal (Some web application not all) from on-premise SharePoint Farm to be available outside company network

– We should limit devices and track those devices accessing portal

– User should be able to authenticate by using their active directory credentials so no additional authentication should be required.

– If a user moves between web application, he/she should not be challenged to enter his/her domain credentials

Thanks

Adnan