In IPsec-based remote access VPNs, transform sets must be explicitly defined. A transform set specifies the encryption and integrity algorithms used to protect VPN traffic. These settings must match on both the client and the VPN gateway for successful tunnel establishment.