What is your opinion on SSTP ? The problem with most VPN tunnels is that you cannot use them if your corporate firewalls only allow port 443/80. SSTP gets you around that.
I haven´t read the specs thoroughly enough to have an opinion.
As for firewalls, as long as they´re not doing DPI (Deep Packet Inspection) you can just run the VPN on the right ports. In addition to the standard ports, we run our VPNs on tcp/80, tcp/443, udp/53 among others. That takes care of most firewalls.