I know this has been discussed here several times, but I am not finding anything recent enough to trust with how fast everything changes. So I am going to throw this ball of snakes out again.

We want to allow our top vendors to access or drawings directly with the most recent updates available as they happen. We have Web2 set up internally already, but making the jump to the outside is not very easy and seems to be lacking good information.   Does anyone do this currently? how did you do it securely?

as a side note, we have to work with a corporate IT department to get this done so it is not going to be cut and dry, I need as much information as I can get my hands on to help the process.