With the industry standard being a split VPN with anything corporate/intranet going over the tunnel, I’m amazed that this is still an issue in 2026.

My old cellular device wouldn’t allow me to connect to any company resources unless I had the VPN going period, it didn’t matter what network I was on and if it detected anything weird or wrong in the entire process it just never connected.