SSL VPN Split DNS configured according to docs but not working.

According to this, only traffic to my domain should be crossing the VPN. 

config vpn ssl web portal
edit Secured-Access
set tunnel-mode enable
set auto-connect enable
set keep-alive enable
set save-password enable
set ip-pools Secured-Pool
set split-tunneling-routing-address Secured-Routing
set forticlient-download-method ssl-vpn
config split-dns
edit 1
set domains Secured-Domain
set dns-server1 My-DNS1
set dns-server2 My-DNS2
next
end
next
end

However, I see non-secured domain resolution against my servers. What would be the cause of this? Are there any supplemental configurations that the above referenced technical tip doesn't mention?