Flex 100H VPN SecuExtender clients connects fine; NO ACCESS to remote network devices

Took me some time to work this out and the fix is there needs to be a routeing rule next hope to remote VPN.

The problem is this if you have a routing like
incoming LAN
next hop WAN
SNAT outgoing-interface

When VPN traffic goes to LAN it gets to the device then a reply happen but the traffic to the VPN IP follows the routeing rule above and so never get back to the client.

There is no routing rule you can make to fix this but there is a workaround
make two address objects with the following range if your VPN IP pool is 192.168.50.0/24
0.0.0.0 - 192.168.49.255
192.168.51.0 – 255.255.255.55
in a group
Then add that to the above routeing rule for Destination Address