FW-HQEXT-3# show running-config webvpn 
webvpn
 anyconnect-custom-attr dynamic-split-exclude-domains description Dynamic Split Tunneling
 anyconnect-custom-attr ManagementTunnelAllAllowed description ManagementTunnelAllAllowed
 anyconnect-custom-attr perapp description per app vpn
 default-idle-timeout 86400
 http-headers
  hsts-server
   enable
   max-age 31536000
   include-sub-domains
   no preload
  hsts-client
   enable
  x-content-type-options
  x-xss-protection
  content-security-policy
 hostscan image disk0:/hostscan_4.3.05033-k9.pkg
 anyconnect image disk0:/cisco-secure-client-win-5.1.3.62-webdeploy-k9.pkg 2
 anyconnect profiles Joint-Force-VPN disk0:/joint-force-vpn.xml
 anyconnect profiles Windows disk0:/windows.xml
 anyconnect profiles Windows-DR3 disk0:/windows-dr3.xml
 anyconnect enable
 tunnel-group-list enable
 keepout "Service out temporarily."
 cache        
  disable     
 error-recovery disable
FW-HQEXT-3#  




FW-HQEXT-3# show running-config  group-policy 
group-policy DfltGrpPolicy attributes
 wins-server value xx.xx.xx.xx
 dns-server value xx.xx.xx.xx
 vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
 default-domain value int.sussex.police.cjx.gov.uk
group-policy GroupPolicy2 internal
group-policy GroupPolicy2 attributes
 wins-server value xx.xx.xx.xx
 dns-server value xx.xx.xx.xx
 vpn-tunnel-protocol l2tp-ipsec 
 default-domain value shdc.police.uk
group-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
 wins-server value xx.xx.xx.xx
 dns-server value xx.xx.xx.xx
 vpn-tunnel-protocol l2tp-ipsec 
group-policy AZURE internal
group-policy AZURE attributes
 vpn-filter value RESTRICT-AZURE
 vpn-tunnel-protocol ikev2 
group-policy Azure_Windows_Group_Policy internal
group-policy Azure_Windows_Group_Policy attributes
 wins-server none
 dns-server value xx.xx.xx.xx
 dhcp-network-scope xx.xx.xx.xx
 vpn-simultaneous-logins 99999
 vpn-idle-timeout 30
 vpn-session-timeout 11520
 vpn-tunnel-protocol ikev2 
 group-lock value Azure_Windows_Connection_Profile
 split-tunnel-policy excludespecified
 split-tunnel-network-list value Split-ACL
 default-domain value shdc.police.uk
 split-tunnel-all-dns enable
 anyconnect-custom dynamic-split-exclude-domains value MCP
 webvpn
  anyconnect ssl dtls enable
  anyconnect mtu 1250
  anyconnect ssl keepalive 20
  anyconnect ssl compression none
  anyconnect dtls compression none
  anyconnect modules none
  anyconnect profiles none
  anyconnect ssl df-bit-ignore disable
group-policy Windows_DR3_Group_Policy internal
group-policy Windows_DR3_Group_Policy attributes
 wins-server value xx.xx.xx.xx
 dns-server value xx.xx.xx.xx
 dhcp-network-scope xx.xx.xx.xx
 vpn-simultaneous-logins 99999
 vpn-idle-timeout 30
 vpn-session-timeout 11520
 vpn-tunnel-protocol ikev2 
 group-lock value Windows_DR3_Connection_Profile
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value Force-ACL
 default-domain value shdc.police.uk
 split-dns value surrey.police.pri shdc.police.uk int.sussex.cjx.gov.uk
 split-tunnel-all-dns enable
 webvpn
  anyconnect ssl dtls enable
  anyconnect mtu 1406
  anyconnect ssl keepalive 20
  anyconnect ssl compression none
  anyconnect dtls compression none
  anyconnect modules none
  anyconnect profiles value Windows-DR3 type user
  anyconnect ssl df-bit-ignore disable
FW-HQEXT-3#