Disable split tunneling for a privileged-access VPN profile
Disable split tunneling for RTJ Office VPN in a canned Windows 11 Settings simulation by enabling the remote default gateway and committing the change through all three windows. No real VPN profile is changed.
Steps
- 1
This privileged-access VPN profile must send all of its traffic through the corporate tunnel, so nothing bypasses the organization's security controls. Right now the profile uses split tunneling: only defined traffic goes through the VPN and the rest takes the local path, leaving part of the session outside corporate inspection and policy. To disable split tunneling, open the profile's classic adapter properties, go to the IPv4 Advanced TCP/IP settings, and check "Use default gateway on remote network." That routes the profile's default gateway through the VPN (full tunnel), so all traffic traverses the corporate path. The change is saved only when you OK out of all three windows (Advanced → IPv4 Properties → adapter Properties); a Cancel or an inner OK alone discards it. Source: RTJ KB Net+ NP-3.5, RTJ KB A+ Core 2 C2-4.9, and RTJ KB Sec+ SP-4.5. Derived from the cited RTJ knowledge-base sources; not derived from certification items. The Windows classic control label and window nesting are [verify]. Last verified: 2026-10-16.
What you should see
All three classic windows close after the final OK, and reopening Advanced TCP/IP Settings shows Use default gateway on remote network checked.
