I have configured AnyConnect with machine certification authentication and everything works nicely. I can log on and is authenticated as expected. Now I want to enable 'always on'. The config is as enclosed. After enabling the 'automatic VPN policy' and 'always on' options the vpn-client reports 'it may be necessary to connect via a proxy, which is not supported with Always on' (see error 1). As a consequence I also get the error 'anyconnect cannot confirm it is connected to your seucre gateway..' . See the encl log from the client.
The log says 'no valid certificate', but I have a public certificate on the ASA and the machine authentication using certificate was also working before enabling 'always on'. What am I missing out here?
