A friend of mine who is a night owl mentioned she frequently has to stop working because her company's VPN shuts down at a certain time every night and comes back on in the morning. She was told this is for "security reasons".
I have worked in many companies with VPN access and have never encountered this. It seems like a highly questionable practice since it is clearly having a negative business impact and I can't see how it would add any significant security value.
Is this practice respected in the industry?