VPN traffic

When a user connects to VPN thru Cisco VPN client over any internet connection, does all traffic flow through the VPN, or is it a separate tunnel inside the connection? In other words, is it possible to monitor all traffic if a user has connected to VPN?