Security - We will get there

Disable split tunneling works.

Noticed that the client changed routing table so I tried to break it by modifying the routing table. I can manipulate routing table without noticed by the client software but can not establish communication to other destinations. The sniffer data proved that UDP packet was sent out but not ICMP/TCP. I can see returning UDP data packets but can not see it from application in the host. It's possible that vpn client software also implemented filtering in the stack plus the routing change for split tunneling control.

The VMC file is XML file contains all the config info. I noticed this by trying to figure out why the share folder is not working then found out you have to setup the folder share when the vm is running. :-)

What a mistake I had.

BTW, my colleague just showed me how to  use VPN to get around the split tunneling control in one physical machine. He uses a vm to connect vpn which has split tunneling control so he can still use the host machine to do things as he wants. He can also transfer files between his host to the machines in the tunnel using this folder sharing provided by VPC. Smart. Remind me I have done this similar thing before for another vpn client software.