



Ideally, the solution provider should be SOC2/PCI/ISO compliance and focus on ensuring security audits and regular pen testing of its infrastructure. Policies so there are no “exceptions.” In fact, many VPNs don't support device authentication and once established, VPN offers way too much privilege (VPN allows for lateral movements, ie ransomware, unless segmenting with VLAN). SSO, 2/MFA, device authentication that are in-line with desired corporate/MSP security The key for ensuring security for remote access is to look for a remote access solution that offers security features such as Be interested to understand your use case and why you see remote desktop needs a VPN at all.
