I have enabled connections using Cisco AnyConnect (version 2.0.0343) to our ASA (version 8.0.2). The group-policy I'm using is the same that we have used for previous IPSec client connections.
Using the IPSec client, split-dns works as expected. However, when I connect (again, using the same user/group policy) using AnyConnect, all DNS queries are sent to the "protected" DNS servers through the tunnel.
Has anyone else experienced this same behavior?