I do not understand how the OP's current setup supports a split tunnel. And most large corporations try to stop them whenever possible, be they via VPN, ICS, or other means. ICS does DHCP and creates an inviting point of attack. Two of my clients disable ICS via GPO. But it sounds like you know a lot more about this topic, so let's defer to you on this one.