Network zone segmentation is apparently too hard for most. Network groups usually lack the inclination to provide any sort of management to the profiles in a VPN solution. Too often it was almost as if they had taken the default profile and added every user to it. This would grant every user unfettered access to the network. This would also tell me in short order that you are most likely running your enterprise on a flat network. I’m curious why so many enterprises suffer the indignity of an ill configured solution.”]
Source: https://www.csoonline.com/article/2136200/vpn-should-not-be-a-backstage-pass.html