[koenigdavidmj]

Some of the FedRamp standards require a VPN and prohibit split tunneling (i.e. Spotify goes directly out to the internet and the VPN only exposes routes to internal company hosts).