Re:could someone explain what the issue is here? (Score 1)

Actually, it is a client side option -- try using the (non-Cisco-branded) vpnc client to connect to a Cisco concentrator that *request* that its clients disable split tunneling. You'll find that the "pushed" no split tunneling is just that: a request that the well behaved Cisco-branded client respects.