This feature is for external users, who inherit the settings from their assigned group upon login. Tunnel all mode ensures that all network communications are tunneled securely through the Secure Mobile Access tunnel.
To enable tunnel all mode
Navigate to Users > Local Groups.
Click the Configure icon next to the group you want to configure.
In the Edit Local Group section, select Enable from the Tunnel All Mode drop-down menu.