But you don't have to expose the BI web server to the internet if you are using either of those. It's hidden behind the VPN. You just have to connect to the VPN first via whatever client you are using (e.g. phone, tablet, etc..) to access the service.
Maybe I'm not understanding what you are...