Enable/disable DNS Proxy Use setting to disable DNS Proxy if your organization doesn’t want OpenVPN to protect DNS requests and use domain routing and domain filtering.
Different DNS servers can be configured for different DNS zones
Default domain suffix can be configured for Windows clients
Enable/disable SNAT Source Network Address Translation (SNAT) is helpful in remote access scenarios to simplify routing configuration on a remote site. However, it might be helpful to disable SNAT for audit purposes or for VoIP solutions that do not work correctly with SNAT.
Define custom client options that can be pushed to all clients
Ability to combine private and public DNS servers OpenVPN Cloud will automatically switch to the next server if first server cannot resolve a domain.
Network domain can have embedded IP enabled Embedded IP enabled permits you to append an IP address to a domain and resolve such domains without a DNS server configuration. For example, ssh email@example.com can be used to SSH into the computer with a private IP address of 192.168.1.1 on the network that is announcing the domain name of server.example.com.
Blocking rules If the Access Group configuration does not permit a resource, then the session will be dropped without waiting for the resource to time out.