Hi, I am not sure of the specific answer to your question, but in ASDM under options tab>preferences>General tab is a check box - "Preview commands before sending them to the device". Check this check box and every time you hit apply it will show you a screen with the commands that it is going to send to the ASA and give you the option of sending them or not.
Give a man a fish.......
Teach a man to fish.......
I believe it does do a separate access list to define the interesting traffic for the VPN. I think it automatically adds the nat0 statement. I would check by looking at the config. You may need to add more nat0 commands if your VPN users are supposed to access the DMZ.
Brian ": )