Ugh. Its a routing issue. These ASA's are setup parallel to the current ASA and core 4500s have the default route heading that way, so the return traffic from internal hosts are not getting back to anyconnect clients. I hate testing in migration network setups.