It is possible to force all internet traffic into the VPN tunnel. Doing so, all internet traffic is routed from the remote gateway instead of the remote user network, the remote user network IP address is virtually hidden to visited websites as it is replaced with remote gateway IP address. Corporate network may apply some additional traffic scan to increase security.
The VPN Configuration is simple and requires 3 steps:
Go to 'Configuration Panel' > 'Parameters' > select 'Block non-ciphered connection' to prohibit non-ciphered traffic from being routed to internet directly.Go to 'Configuration Panel' > 'Phase2' > select 'Subnet Address' as 'Address Type' and set both 'Remote LAN' and 'Subet Mask' to '0.0.0.0', so that all traffic (to any IP address) will be routed to VPN tunnel. Note that '0.0.0.0' means all traffic including traffic to your local network will be routed through the VPN tunnel.On the remote gateway, set the VPN tunnel in the same way as both configuration must be symetrical with local subnet de 0.0.0.0/0. Note: this is only applicable to IPsec VPN gateway, this step is not required for SSL VPN tunnels.
Note:
Some VPN Gateway/Routers may not support this feature (i.e. hub&spoke: '0.0.0.0/0'). If supported, you'll need to create a rule to authorize wan to wan traffic.