Hello Kevin, > To set ocserv as the default gateway, I just commented out the "route > = " lines in the config file. This stops it from sending the > "X-CSTP-Split-Include:" headers. > This seems to be equivalent to "split-tunnel-policy tunnelall" on an ASA. perfect. I just tried that can confirm this. Thank you for the tip. I should have read the documentation or the source code. :-) Cheers, Thomas