This event detects a VPN gateway change.
Why this Event is Important
VPN gateways are used to provide secure communication between two VPN gateways. A VPN gateway change indicates that communication is not being transmitted over the same VPN gateway. Unauthorized VPN gateway use can cause leakage of sensitive information, leading to man in the middle attacks.
Investigate what the approved gateways are in the company. Audit the use of VPN gateways and look for any unauthorized gateways.
Ensure that users can only connect to the approved VPN gateways.