You have the ability to deploy virtual machines attached to particular rooms and tasks. These machines can only be accessed using a VPN connection. In this case, users need to download an OpenVPN configuration file from here. Once a user deploys a machine they will be given a internal IP address which they will be able to communicate with using the OpenVPN connection.
Our OpenVPN configuration will only route users traffic if they're trying to access one of the machines on our network, all other traffic is routed through their own connection.
To reiterate, when a user is connected through our OpenVPN connection only traffic for 10...* networks are routed through the VPN.
It's important to note that you can't just open the IP address in a browser. That would only work if there's a webserver running on port 80. Read the material carefully, you may be provided SSH creds for some walkthrough rooms. Most of the time, gaining access is part of the challenge.
A very limited number of rooms have in browser remote accesss. These are the exceptions, not the rule. Do not expect this behaviour by default.