US National Security Agency issues guidance on how to secure IP Security (IPsec) Virtual Private Networks (VPNs) NSA also highlights importance of using strong cryptography to protect sensitive info contained within traffic while traversing untrusted networks when connecting to remote servers. NSA also issued mitigation for Pulse Secure, Palo Alto, and Fortinet VPN clients, as well as recommendations for how to harden VPN security configurations. In October 2019, the NSA warned about multiple state-backed Advanced Persistent Threat (APT) actors who were actively weaponizing the vulnerabilities to compromise vulnerable VPN devices.
Source: https://www.bleepingcomputer.com/news/security/nsa-releases-guidance-on-securing-ipsec-virtual-private-networks/