I recommend introducing a whitelist mechanism that allows approved websites to be accessed directly over the Internet. Routing all traffic through the VPN is not always necessary and may, in some cases, raise performance or security considerations. A controlled whitelist would enable specific websites to bypass the VPN while preserving overall security and governance policies.