For small startups, you don’t ensure that software is updated across the company.

For larger firms with an IT department, you can make your VPN software refuse to connect if the client machine is running any vulnerable software.