If the clients are connected via VPN then you will have to do split tunnel for them to browse the Internet. Other option would be to get the proxy server do the vpn and all other machines connect via the proxy server which can direct the Internet requests accordingly.