If a user is on his or her home network and have access to resources on their local subnet/broadcast domain, then connect with VIA to a controller with tunnel mode where all traffic, including internet traffic, is tunnlled back to the controller, it appears they will still have access to the local subnet resources. Assuming this is expected behavior, is there a way for VIA to prevent users from accessing local resources while connected with VIA in tunnel mode? This may be a security concern.