A tunnel filtering system comprising: a wireless network comprising at least one base station and a packet data network gateway interconnecting said wireless network to a public network; at least one user equipment comprising a Virtual Private Network, VPN, client and at least one mobile application; a wireless radio connection interconnecting said at least user equipment and said base station; an EPS session interconnecting each of said at least one user equipment and said packet data network gateway via said wireless radio connection, each of said of EPS sessions being identified by an IP address of said interconnected user equipment wherein each of said EPS sessions comprises a default EPS bearer and a plurality of dedicated EPS bearers identified by an EPS bearer ID; a VPN gateway connected to said public network and comprising a gateway IP address; and at least one application server comprising at least one server application; wherein a plurality of VPN tunnels interconnect each of said VPN client with said VPN gateway, each of said VPN tunnels comprising a user equipment IP address, a VPN gateway IP address and a known port, wherein data transmission via one of said VPN tunnels is supported by an associated one of said EPS bearers; and a set of filters are shared between a first routing function in each of said at least one user device and a second routing function in said VPN gateway, each of said filters being used by said first and second routing functions to direct a particular one of a plurality of data types to a first specified one of said plurality of VPN tunnels; wherein a communicating one of said at least one mobile application communicates data of said particular data type with a communicating one of said at least one server application via said first specified VPN tunnel and a first associated EPS bearer and further wherein when said first associated EPS bearer and said first specified VPN tunnel are no longer available, at least one of said filters is modified such that said particular data type is associated with a second specified one of said VPN tunnels wherein said communicating mobile application communicates said data of said particular data type subsequently with said communicating server application via said second specified VPN tunnel and a second associated EPS bearer. a wireless network comprising at least one base station and a packet data network gateway interconnecting said wireless network to a public network; at least one user equipment comprising a Virtual Private Network, VPN, client and at least one mobile application; a wireless radio connection interconnecting said at least user equipment and said base station; an EPS session interconnecting each of said at least one user equipment and said packet data network gateway via said wireless radio connection, each of said of EPS sessions being identified by an IP address of said interconnected user equipment wherein each of said EPS sessions comprises a default EPS bearer and a plurality of dedicated EPS bearers identified by an EPS bearer ID; a VPN gateway connected to said public network and comprising a gateway IP address; and at least one application server comprising at least one server application; wherein a plurality of VPN tunnels interconnect each of said VPN client with said VPN gateway, each of said VPN tunnels comprising a user equipment IP address, a VPN gateway IP address and a known port, wherein data transmission via one of said VPN tunnels is supported by an associated one of said EPS bearers; and a set of filters are shared between a first routing function in each of said at least one user device and a second routing function in said VPN gateway, each of said filters being used by said first and second routing functions to direct a particular one of a plurality of data types to a first specified one of said plurality of VPN tunnels; wherein a communicating one of said at least one mobile application communicates data of said particular data type with a communicating one of said at least one server application via said first specified VPN tunnel and a first associated EPS bearer and further wherein when said first associated EPS bearer and said first specified VPN tunnel are no longer available, at least one of said filters is modified such that said particular data type is associated with a second specified one of said VPN tunnels wherein said communicating mobile application communicates said data of said particular data type subsequently with said communicating server application via said second specified VPN tunnel and a second associated EPS bearer.