Well, hell, y'all, when I thought about what I could/couldn't do, WF seems very obvious in hindsight. (to be embarrassingly honest, I had configured WF as you mentioned...but on the remote/VPN PC, not the LAN resource I was trying to reach--DUH!). @AurelM, thanks for the explicit...