Changing the VPN policy (proxy mode) is the way to go: