So my initial problem was not being to use Mac Binding for my SSL-VPN clients and thought the split tunnel was the culprit. I was under the assumption I could simply add the mac addresses of my remote users laptops and it would bind that piece of equipment preventing any user from basically masquerading as an that authenticated user or prevent them from logging in through multiple machines. The sophos tech this is not how it works, hence the reason it did not work Enabled. This feature is pretty much useless in my opinion if you cannot bind the actual piece of equipment connecting, as the other equipment through its hops, will inevitably take on that mac address, rendering any type of login. That feature is pretty discouraging.
