Check this outhttps://community.cisco.com/t5/security-knowledge-base/configuring-posture-services-with-the-cisco-identity-services/ta-p/3154278

Test the VPN connection from different networks to determine if the issue is network-specific or widespread.if its yes then first things to update AnyConnect client. Check this out this post.  

aaa authorization commands default group ACS_SERVER local In this case, the local admin users are authorized to run all commands.