According to this, only traffic to my domain should be crossing the VPN.
config vpn ssl web portaledit Secured-Accessset tunnel-mode enableset
auto-connect enableset keep-alive enableset save-password enableset
ip-pools Secured-Poolset split-tunnelin...
Windows 11 Enterprise 22H2 FortiClient EMS 7.2.3 Forticlient
7.2.4Windows 11 Pro 23H2 Forticlient VPN Only 7.0.7Split Tunneling is
enabled. If it weren't, I wouldn't be able to browse the internet
because the tunnel access is not set for all traffic.