Security when off the corporate network, off the VPN.
The bottom line is that the VPN is not always-on despite “best practice” or “locked down” policies. And your firewall, proxy, and AV is not enough to protect your mobile workforce. Learn how the DNS-layer can be used for off-network security.