In the previous lab, we provided direct Internet access (DIA) to the proxy servers in the Guest VPN so that guest clients could be proxied to the Internet. However, there is still one traffic optimization that we can make before moving on to another use case. We did not specify any destination when matching packets in the current data policy. Hence, all traffic flows from the proxy servers are being leaked into VPN 0 and forwarded to the Internet, including packets destined to private IP addresses such as 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 (RFC1918).