“all SSL VPN and administrative sessions”

Well, there’s your problem right there. SSL is dead and buried and anyone that still writes as if it isn’t is a moron. And if you still use SSL your an even bigger moron.