Cisco AnyConnect Secure Mobility Client has been configured to use IKEv2 for one group of users and SSL for another group.
When the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect.
What might be the problem?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
The problem described in the question is that the IKEv2 users cannot download the new AnyConnect release automatically when they connect, while the SSL users can. This suggests that there may be a configuration issue that is specific to the IKEv2 users.
Answer A suggests that the XML profile may not be configured correctly for the affected users. The XML profile is a configuration file that can be used to customize the behavior of the AnyConnect client. It is possible that the XML profile for the IKEv2 users is not configured to allow automatic updates, or that it is pointing to an incorrect location for the new client image.
Answer B suggests that the new client image does not use the same major release as the current one. This could be a problem if the IKEv2 users are configured to only accept connections from a specific version of the AnyConnect client. If the new client image uses a different major release, it may not be compatible with the configuration of the IKEv2 users.
Answer C suggests that client services are not enabled. This could be a problem if the client services that are responsible for delivering updates to the AnyConnect client are not running or are not configured correctly. This could be a problem for both the IKEv2 and SSL users, so it seems unlikely that this is the correct answer.
Answer D suggests that client software updates are not supported with IKEv2. This seems unlikely, as both IKEv2 and SSL are supported protocols for the AnyConnect client, and it would be strange for software updates to only be supported for one of them.
Overall, answer A seems like the most likely explanation for the problem described in the question. However, without more information about the specific configuration of the AnyConnect client and the network environment in question, it is difficult to say for sure which answer is correct.