As Zany pointed I am pretty sure that this is based on hostname. Again this is a feature in ios which pulse supports
I checked on the Apple site and confirmed VPN on Demand is for domains/server names only; IP is not supported (http://images.apple.com/iphone/business/docs/iOS_VPN_Mar12.pdf)
