Conditional Split tunneling

Hi,

We have a DMZ that requires VPN to access.  I want to enable split tunneling for people connecting from 10.0.0.0/8, so they don't get tunneled to the FG to then go back out the internal interface for LAN access.  But disable split tunneling for remotes, so they are forced through the FG for all traffic.

I can find nothing in the docs that indicate this is possible.  I don't want to give users separate "inside" and "outside" authentication.  Is this possible?  How else could I do it?