Set DNS When Cisco AnyConnect is Connected

Release Candidate Programs Tester

Hello - I'm looking for a way to set the DNS servers once a user connects to cisco anyconnect. We're running into some issues because we use a full tunnel so users automatic DNS isn't working properly. I can see through an scutil --dns that the DNS there is set properly once VPN is connected as seen in the screenshot attached. However in system preferences, and in the resolvers.conf file, the new DNS entries are not shown.

Additionally when attempting a dig, it will fail when connected to VPN unless we specify dig @dnsserver

Is there some simple script to set DNS or add the DNS entries as backup for when VPN is connected?