Two remote VOIP phones needing access

I have an asterisk system at an office. I have two users with VOIP phones in their homes and need access. They would like to be able to call each other on the VOIP phones as well.

The office is behind a PIX501 firewall.

What would be the best way to provide this connectivity?

VPNs.