HI,
I believe your need can be justified with Splittunnel forwarding mode. this mode is suitable for RAPs. when you bring up RAP on Split-Tunnel mode, it will segregate Internet traffic and Corporate traffic and allows only corporate traffic to reach the controller and rest of the traffic will be NATed locally into the Internet.
Hope you got your solution, please feel free to comeback if not solved.