DNS proxy function may be selectively bypassed. A list of hosts and/or domains (both will be treated equally) can be entered in the AT&T Administration Server. Any name lookup that ENDS with a match in the list will not be sent to the secure DNS servers. Instead the match will be sent to one of the Internet DNS servers that the VPN Gateway is currently configured to use. For example, say that “website.com” was in the list of exceptions returned by the AT&T Administration Server. That means “www.website.com” and “host.network.website.com” would both be considered matches but “website.com.net” would not.