Cisco ASA AnyConnect VPN - Connects and can route internally, but cannot route to internet

Howdy,

I’ve setup a Cisco AnyConnect VPN - when I connect with a client, I get an IP and can route to internal resources fine.

However, when I connect, I cannot route out to the internet?

I’m not split tunnelling, all traffic is routing via the tunnel. The internet traffic is going out the same interface clients connect on.

Do I need to NAT the VPN clients back out?

Any ideas would be very helpful!