Inmyopinion,theuseoftheVPNinthecorporateworldwaslookedatasjustawaytoaccessthe
internalresourcesoccasionally.Althoughthisthoughtwasalreadychangingwithmanywork-from-
homejobsappearinginthemarket,COVID-19acceleratedthis.Thisprovedthatmanypeoplecould
workfromhomejustastheycouldfromtheiroffice.Thisalsoattractedmanypeopletodesireto
workfromhomeandlookforthiskindofbenefitinajob.Thisopensanewcanofwormswhenit
comestosecurity.
VPNalsohasitsrisksthatwouldneedtobeaddressed.Someofthemcouldbeontheprotocols
chosenortheconfigurationdonewithintheVPNclientitself.Herearesomeexamples.Usingthe
L2TP/IPsec,althoughitisaverypopularprotocol,itusesapre-sharedkey.Ifthiskeyisavailable
onlineortheattackercangetthisonefromtheclientconfiguration,thenaman-in-the-middleattack