So to clarify, d2vpn.com is primary, d1vpn.com is secondary. You want to have users try to connect to d2vpn.com, and fail to d1vpn.com in the meantime? Once you get d2vpn.com up, users will connect to that FQDN immediately? That should work, I believ...

Hi @tryingtofixit, your primary FQDN should not be in the backup server list. The 'backup servers' list is global, and applies to all server list entries. The 'backup server list', found in the server list, is specifically for that server list entry....

The global 'backup servers' option in the AnyConnect XML profile is universal for each server list entry. If you create a backup server list specific to the server list entry, that will take precedence. If I take the global backup server list and it'...

Hi @tom-bence, no problem.  Unfortunately with this issue, the most I can do is speculate out without digging into the grittiness of logs and DART bundles. You'll want to head into the Secure Client/AnyConnect GUI, click the settings cog icon and hea...

Hi @tom-bence , I've been researching and it looks like it may be because Secure Client is probing the head-end for captive portal detection. There were also reports of Umbrella attempting to probe the head-end which resulted in the Secure Client GUI...