superroot with ciscovpn
superroot without ciscovpn

also fixed nat template url for workspaces