You may well have been able to do both at the same time. Are the users who this started happening to in the same user group on the Contivity? Split Tunneling is an option that can be enabled/disabled in each group. If it was disabled in one group, users in that group would lose the ability to access the net, while others wouldn't lose it.