https://docs.opnsense.org/manual/how-tos/sslvpn_client.html
It needs to get a step added for Unbound DNS resolution.
I had to add a step for the ACL in Unbound as the default only allows internal resolution and not the new OpenVPN IP Pool.
(https://i.imgur.com/3bPfSzD.png)
Updated /24 range for the VPN
(https://i.imgur.com/ilQI9eT.png)
Cool ... that did the trick :D
Thanks Animosity022
Sure thing!
I didn't even observe it's not in the Documentation/ How-To/ Wiki.... But sure thing it's not working without, I have Access Lists in Outbound for HQ + 4 branches.
I only regret I didn't provide this sooner, didn't realize so many people needed it and didn't know it.