Thanks for the response, that is what I did. I selected policy based routing and routed all thru the vpn, then i selected my roku and routed it to the WAN that is how I get the leak and have no idea if that is good, bad or done properly. I did ask over there and didn't get an answer.