VPN regulation