🔵
Full tunnel: all traffic routed through VPN — corporate can inspect everything, slow, secure.
⚪
Split tunnel: only corporate traffic goes through VPN — faster, direct internet access.
Full tunnel = better security visibility. Split tunnel = better performance. Security concern with split tunnel: user can be on VPN and simultaneously on an infected home network. Corporate policy dictates which to use.