Comment by arkadiyt

We had some employees using travel routers to bypass company policies around working abroad, taking laptops to China, etc. If you want to detect that sort of thing you could consider adding detection rules in your SIEM for connections to your company VPN from an ip address that is itself associated with another/commercial VPN. It won't catch people connecting to VPN servers offered through their home router, but it's something.