We have a number of remote sites connecting to headends via IPSec encrypted GRE tunnels over the public internet. Our current configuration works, but we would like to see if there is a better way of handling the no-split tunnel rule. At the headend...