I'm currently working at home. My employer provides me a VPN access to the company resources: intranet, ssh access to computers, etc. I was wondering what exactly means to use a VPN, and what type of information my employer can "see" of my use of the internet. Is all traffic routed through my company, so they can see what I do with my internet connection? I doubt it for various reasons:
- there is some little information provided by the client that mentions the number of bytes transferred, which are a always small numbers
- when I check my IP through internet services, or even I try to geolocalise me, I get the same result before and after connecting the VPN.
- I doubt my company is willing to afford the resources required to route the traffic of all their employees (and my connection is not sensibly affected when I use the VPN)
I have the impression that only "relevant traffic towards the company" is routed through the VPN, whereas the general use of the internet such as Youtube, for instance, is not channeled through the VPN. Does this make any sense?
To give some details of my connection that can be used to resolve my question, I use Forticlient, although I have recently discovered I can also use openfortivpn, that has the advantage of being scriptable. Other than this, I don't know many details of the connection and how it is performed.
How can I gather more information of what information is exactly being sent to my employer through the VPN? Should I disconnect it whenever it is not strictly necessary for my work?