Salesforce Exam Heroku-Architecture-Designer Topic 7 Question 6 Discussion

A customer's IT department will not allow VPN access through their on-premise gateway. Users need to be able to access trusted Heroku applications only when they are in the office. These applications are deployed to a Heroku Private Space.

Which two Private Spaces features should an Architect recommend to enable on-premise users to gain the access they need? (Choose two.)