With most VPN technologies, once the user establishes the connection, the virtual network takes over everything, and all traffic flows through the tunnel. In such a case, even if the user needs to browse to a website that's on the public Internet, that traffic would still come through the VPN tunnel. This makes sense, because organizations are concerned that if traffic can go directly to or from the Internet, this essentially bridges the networks together without filtering, and this might expose the corporate network to attack. In the networking world, this type of thing is referred to as Forced Tunneling, because we force everything through the tunnel.
With URA, on the other hand, the default mode is split tunneling, allowing traffic destined for resources on the public Internet to go out directly, and not through the tunnel. This might seem scary to some administrators, but in fact, it's perfectly safe. The reason for this is that the traffic that goes to the...