AnyConnect and Dynamic Split Tunneling Include feature

[Myky]

Hi guys,

When the Dynamic Split Tunneling Include feature is configured to inject /32 IPs based on the DNS lookups of the FQDN, how ASA knows what was the DNS response if the lookups never traverse the tunnel? 
Is there some sort of DNS sniffing on your local physical adapter DNS lookups done by my virtual AnyConnect interface to let ASA know to inject /32?

Thanks,
myky

[Myky]

bump!

[MHM Cisco World]

sorry can you more elaborate ?

[Myky]

When following this link:
https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215383-asa-anyconnect-dynamic-split-tunneling.html#anc14

Let's say we use split-tunnels and want to include any domain example.com inside the tunnel.
When DNS lookup happens on the client machine, how anyconnect/asa knows which IP was resolved for 1.example.com FQDN?

DNS lookups don't traverse over the tunnel, the client uses its local internet breakout.

Thanks,
myky