The Azure VPN Client just entered public preview on macOS. It will support RADIUS authentication for OpenVPN protocol, among other items. With the client, users will be able to use conditional ...

To overcome this, you have to define routes to specific places by some mechanism. eg. for network 10.33.1.0/24 use gateway x.y.z.1 which will then forward through the VPN.