Dynamic-split-include IP resolves correctly but ip/domain unreachable

[glowmaster]

Running into an issue with dynamic-split-include-domains correctly resolving the block of domain IP address but not passing traffic back to anyconnect client. The domain IP address are correctly showing up in the Secured Routes(IPv4) section but they cannot be accessed via webrowser or pinged. Static split tunnel routes are working without issue. 

[Mike.Cifelli]

Please provide additional information so the community can better assist.  Are you able to share screenshots of AC UI routes and any other relevant information?  Couple of things to consider:

-Have you verified that the ASA itself is not dropping packets when using those secured routes due to ACLs/bad routes?

-Is connectivity working between client and domain clients when you have no split tunneling enabled?