If you want your web portal to have tunnel mode access, select Tunnel Mode when creating a new portal. Enable Split Tunneling so that the VPN carries only the traffic for the networks behind the FortiGate unit. The user’s other traffic follows its normal route.