Problem Definition
Currently, Cloud has the option to do IP whitelist but that would require users to be connect to a VPN.
Suggested Solution
Allow whitelisting by Mac addresses or by issuing a client side SSL certificate for all internal users laptops.