Thanks for comments lads - But we have sorted it
The subnet that the computers were put on conflicted with our network subnets so the route always went through to the Tunnel on our network.
Changed local subnet to 10.60.10.x which does not conflict.
All working now.
Need to refund points and closes call