Hello,
I think you may not have split tunneling enabled.
Can you please give me the output of the following command from the Router.
(please hide your secret key and the group name when you paste the config).
sh run | sec crypto ipsec
And when the client is connected, can you please look at the Statistics, Route Details and share the routes that are in the secured routes sections, please.