You need to define the apps that you want to access when you use clientless SSL (webvpn portal)
If you use AnyConnect, then you have a full tunnel (pretty much like an IPsec client tunnel where you have full access to the remote network just like if you're sitting there)..
Federico.