Portal Access Resource - leaving some html links unpatched

I have a portal access resource that reverse proxies traffic to a corporate intranet page. In the browser, the URL to this page is rewritten correctly to the DNS name for the virtual server. However, I need the F5 to leave some links on this intranet page unpatched (links to externally hosted web sites). On the portal access resource I have HTML patching unchecked. On the rewrite profile applied to the virtual server, I also have split tunneling enabled with the links in the bypass list in the form of https://some.domain.com*. But these links on the intranet page are still getting re-written to https://f5vipname.com/f5-w-.... What am I missing?