While using Client to PIX IPSec VPN, split tunneling is the only way that I know of to tell the client what traffic should be sent out encrypted and what traffic could be put out directly to the internet without encryption. I do not think you can do without split tunneling. However, if you do find a way, would it be possible for you to share it through the forum.