You have the following:
access-list SplitTunnel standard permit 172.16.100.0 255.255.255.0
group-policy Kraiburg attributes
split-tunnel-policy excludespecified
This says tunnel everything (including Internet traffic) EXCEPT the 172.16.100.0 network, probably not what you want. Remembe ryour split tunnel networks are networks you want to get to over the VPN, they're not your VPN pool of addresses
Change it to:
access-list SplitTunnel standard permit 10.1.1.0 255.255.255.0
group-policy Kraiburg attributes
split-tunnel-policy tunnelspecified
and then you will only tunnel the traffic destined for the 10.1.1.0 network, all other traffic will go out in the clear to the Internet.
