An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)