enable e-mail 2F authentication

CLI part:

config system admin
// ALTERNATIVE: config user local
edit <username>
set two-factor email
set email-to <email@address.net>
end

GUI part:

you can use your own secured server, setting is here:

System -> Settings -> Email Service

Settings which is requerd for DNS split tunneling on MAC OS

config vpn ssl web portal
    edit "tunnel-access"
        set dns-suffix omni-x.com
    next
end