Refer to the exhibit.
<ServerList>
<HostEntry>
<HostName>SIMOS ASA</HostName>
<HostAddress>simos.test.com</HostAddress>
<UserGroup>simos-group</UserGroup>
<PrimaryProtocol>IPsec</Primary Protocol>
</HostEntry>
</ServerList>
tunnel-group AC general-attributes
address-pool VPN-POOL
default-group-policy GroupPolicy_AC
tunnel-group AC webvpn-attributes
group-alias simos-group enable
group-url https://simos.test.com/simos-group enable
An administrator had the above configuration working with SSL protocol, but as soon as the administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able to connect. What is the problem?
A.
IPsec will not work in conjunction with a group URL.
B.
The Cisco AnyConnect implementation does not allow the two group URLs to be the same. SSL does allow this.
C.
If you specify the primary protocol as IPsec, the User Group must be the exact name of the connection profile (tunnel group).
D.
A new XML profile should be created instead of modifying the existing profile, so that the clients force the update.