Select a vendor that meets and/or exceeds compliance standards within their VPN solution and make sure that all of your end users use this vendor so that your compliance is standardized. This vendor will run server checks if anything falls out of compliance so you don’t have to.