Depends on how the routing is setup at each remote site. You should be able to see in each branches' Sonicwall where the default route is pointing (0.0.0.0). If it's out to the local ISP, then only the DNS queries are going over the tunnel and all internet usage stays locally. If it's going to the tunnel, then everything is going through the tunnel.