Best VPN appliance with 2FA

I would look into Palo Alto Prisma Access. I have 6 POPs across the US and run IPSec tunnels back to my data center for corporate access. It’s an easy design that supports MFA across many identity providers.