Has anyone been able to get Anyconnect ISE Posturing to work when split tunneling is enabled? It works fine without it, but when I enable split tunneling the web page does not automatically popup like it does when it's disabled. I've tried several things including a DNS record for enroll.cisco.com pointing to a dummy IP that goes across the tunnel, including the public IP for enroll.cisco.com in the split tunnel ACL, and using split dns to send the cisco.com domain across the tunnel.
