at the top in access-lists access-list outside_cryptomap_dyn_20 permit ip any 192.168.10.192 255.255.255.19 then below in vpn config vpngroup vpn split-tunnel vpn_splitTunnelAcl