Yes, that's the way it is. The tunnel is encrypted, so unless there is some serious packet sniffing going on, work or anywhere for that matter is not going to see the traffic.
Downsides to the FREE product, are you don't get audio or remote print support or direct filesharing support (drag from the browser session to your LOCAL desktop!) but that can always be purchased if they are indeed necessary.