this post was submitted on 03 May 2026
787 points (98.4% liked)
Technology
84930 readers
3684 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Good thing my firm doesn’t have an office in UT; we’re all on a VPN to work from home.
Generally speaking, most VPNs used for business are a split tunnel, and aren't forwarding all of your traffic, just the traffic relevant to your company resources that would otherwise be inaccessible unless you were on-site. So your internet traffic and regular browsing are still sent as if you had no VPN connection at all.
I don't think that's actually true. Most route traffic through malware/protection software which would be bypassed by split vpns.
There are also a number of attacks that target this sort of VPN setup so it's my understanding it's generally not a good idea.
Routing is something you can control client-side. Well at least you can configure that all traffic should be routed over the VPN. If your company provides an exit to the internet over VPN is another issue, but I suppose most do.
They can do that, but in my experience they do not, if only because it would be a vector for external attackers (who could control that machine via those connections routed directly to the Internet) to get into the company's intranet without actually having to go through the company's firewalls.
This is what strong endpoint security is for. EDR software is also common. Routing everyone's internet traffic is pretty strenuous.
Not on the company provided computers we used on my last job guess they would just be illegal
They mostly aren’t split tunnel.