@patoberli Yes, I did try the block of SSL and you're right, it blocks everything. I don't want to block the use of AnyConnect, I want to block the use of AnyConnect for the sake of connecting to our network within our on-prem corporate guest SSID....