Worth considering: every serious SIGINT agency probably had this capability against Netscreen VPNs. If you do a lot of network infiltration, these boxes are among the most useful targets; unlike routers running JunOS, the VPN concentrators have a large outside-the-packet-filter attack surface, and everyone runs them.
It'd be surprising if NSA and GCHQ didn't have similarly powerful capabilities against all the current VPN products.
It'd be surprising if NSA and GCHQ didn't have similarly powerful capabilities against all the current VPN products.