Why does a project manager have any say at all.😁  Foe what reason would you want to hide their egress point to the Internet? If the circuit is also used for your corporate /business traffic then you are far better served installing a local Internet egress circuit on an MX or some other gateway that serves GUESTS only, IMO ... View more

If you have no other VPNs of any kind, then you should be able to do this by including just the VLAN that has the source traffic (and it will need to be dedicated for this) and specifying a remote encryption domain of 0.0.0.0/0. ... View more