When running AnyConnect VPN on macOS, both IP addresses (VPN and physical) are registered in Windows DNS (RFC 2136) after establishing the VPN tunnel - doing the same with Windows clients just the IP address assigned to the VPN adapter is registered ...