We currently have a BM3.8 installation with C2S running successfully
on a legacy VPN.

The problem we have is our C2S users are pretty much free to roam the
web according to their whims unlike our office people who are
restricted by our BM Proxy server.

So, is there a way I can force our C2S users to go through our proxy
server in order to minimize the trouble they get themselves into?

If so, what are the steps I need to take?

If not, any suggestions? Thank you.