We have a config where we have not enabled specific tunnel- groups for the users to elect when they log in the anyconnect client.
This should mean that when I log in the anyconnect app with my username and password I will be placed in the defaultRA group.
But here is the problem when I click on sh vpn-seesiondb anyconnect all I can see are people being a part of the defaultwebvpn tunnel-group.
The vpn protocol is ssl-cleint
Either I am wrong in thinking that you will be a part of webvpn group only when you login from the browser or this webvpn group has some sort of precedence over the default ra group.