Company Mac OS laptop must connect to Cisco AnyConnect VPN in order to access to the Internet
I found the solution.  We use mandatory proxy for http and https.  So if the laptop is NOT connected to the VPN (meaning cannot hit the proxy server IP address) it cannot route traffic.