What is the best practice when sending data via HTTPS outside a Hospital Network

We are getting more and more request wondering if we could send/receive data via HTTPS to the outside world from within our Hospital Network. As you can imagine our Ensemble/Cache productions are not exposed to the DMZ or has access outside of the network. We only communicate with external vendors through a VPN, so communicating not using a VPN is rather new to us.

Currently there is a project to get rid of using Proxy, and instead of through a Load Balancer that can use rules to filter out traffic, which adds another layer of complexity.

So does anyone out there have a Best Practice, or can share how they setup their Architecture to allow their Ensemble/Cache still be secure but able to also connect to the outside world via HTTPS?

Thanks

Scott