5.2.5 dropping SSL VPN when switching to online status

I have 5.2.5 clients managed by an EMS server and if I put the IP range that is assigned to the clients in on-net address list, the client immediately disconnects as soon as the EMS server tells the client it's online. If I remove the IP range from the on-net list, thus leaving the client off-line when it's connected to the VPN, the connection is stable.

Any ideas for a workaround? What I'm trying to accomplish is for the client to use local web filtering when offline and the FortiGate filtering when on. This works great for LAN/broadband connections, but not for the SSL VPN.

This is the xml section I'm talking about.

<onnet_addresses> <address /> </onnet_addresses>

Thanks,

Craig