To measure traffic conditions through the Internet, the CNA system must send active probes through your VPN and it must be able to receive responses to those probes.
This requires both policy and routing configuration.
