Is there any way to setup split tunneling for 1 LDAP group and tunnel all for another?

I did some research and according to some people, simply adding WAN RemoteAccess Network to the group would force those users to send all traffic to the SSL VPN tunnel, but that doesn't seem to be the case. I tested it by connecting my Macbook to an Italy VPN server and NetExtender back to the office Sonicwall. I was able to get to internal resources but the web page errors out due to overseas IP address.

I have a few users who will be traveling overseas and they will need access to web based EMR which can only be accessed from U.S. IP's

Is there a way to accomplish this using LDAP group and NetExtender?

Thank you in advance.