Even though many of the blogs I've read on UAG DA SP1 say that we can safely do split tunneling with DA Clients, our security group has requested that we block split-tunneling. I see that I can force-tunneling ... which uses IP-HTTPS for the tunnel while client is on internet.
The question has come up on how to disable Direct Access services so the client can use their local home network for 'local' work. And when they need to connect to the corporate network, they can re-enabe Direct Access services....which blocks split-tunnel.
Bill