Yeah, I'm worried about the day when infosec turns it's eye toward WSL. So far they have turned a blind eye, but just wait until someone cooks up an exploit targeting WSL...
Sometimes it is routed from the VPN, sometimes it is DNS, sometimes it just needs a restart. I'm not sure if that situation has improved. There were some workarounds at one point.