rockcetman77, normal setup: The cisco vpn client connects to the Cisco VPN Concentrator and does a MFA before being given access to the network. I don't know what you mean about adding routes in the workstation since there is no need for that.
Are you using the VeePN with MFA and Onguard or just 1 step authentication?