CPP is designed to be used with split tunneling because the Tunnel Everything option already blocks all nontunneled traffic.