Your comments

This is a MUST HAVE, just had the situation yesterday were the client's DNS configuration became invalid after the removal of a VPN client.  CW control became useless at this point.   Maybe as an additional idea:  add the ability to do internal DNS lookups with DNS servers specified in the CW config, as a failover in case the DNS lookups through the OS configuration fails.