You can configure an XML profile "client profile"and enter the URLs that you want to see in the drop down menu of the anyconnect client in the "Server List" of the ASDM editor option you can follow this link to configure the client profile from the A...
Creating a group policy for each user group will be a good option you can also use DAP to assign a web ACL to the user that is connecting to the clientless portal, you can use Cisco, LDAP or Radius attributes to associate the DAP to the user. ...
On ASA1 you can set a
capture capin interface inside 192.168.2.0 255.255.255.0 192.168.1.0 255.255.255.0
send traffic then do a show capture capin
make sure that you see packets back and forward
also run a packet tracer:
packet tracer input...