External access to the windchill system

Hi guys,

Need free access of users windchill system outside the network of my company, what would be the best practice for this type of access so as not to compromise system security?

Thank you for your help,