Worth considering: every serious SIGINT agency probably had this capability against Netscreen VPNs. If you do a lot of network infiltration, these boxes are among the most useful targets; unlike routers running JunOS, the VPN concentrators have a large outside-the-packet-filter attack surface, and everyone runs them.<p>It&#x27;d be surprising if NSA and GCHQ didn&#x27;t have similarly powerful capabilities against all the current VPN products.