But you can also use vpn policy in the client side to not use vpn for all clients.