@njccnp are you trying to do this after connecting to another machine via RDP? (Your machine, RDP, VPN to sandbox)
If so you need the "AllowRemoteUsers" option. Check the XML syntax in the profile to make sure it is well formed. It will be located in something like (<WindowsVPNEstablishment>AllowRemoteUsers</WindowsVPNEstablishment> in profile.xml) Note that you often need to restart the AnyConnect service after making a profile change to make it re-read it.
Only time i have ever seen that error before, some say this fix with XML does the trick others do not, YMMV.
Hope this helps.
Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io
