AC SBL Uses Wrong Profile to Login

[gilbert.aispuro1]

Keep in mind that this is an FTD managed by FMC, so mostly all config was Pre-Deployed by myself using GPO in the backend.

SBL is working fine but it's picking my "Mgmt Tunnel VPN" Profile, which is the incorrect one. How does SBL choose the Profile? Can I edit this selection for SBL Profile? I would like it to use the "Cert Auth VPN" profile. 

I have 3 profiles:

1. AAA Auth VPN - Staff
2. Cert Auth VPN - Will replace #1 sometime
3. Mgmt Tunnel VPN - Management tunnel for Servicing. 

[Francesco Molino]

Hi

Your anyconnect SBL uses certificate for authentication but how authorization is done?
You can either push the right profile during authorization or configure the alias to point the xml file to right profile.