CSO.com highlights security issues with VPN connections, yet IT professionals still do not understand security requirements for Salesforce environments.