I'm not sure you can link directly using the webvpn portal, although you can certainly create a URL for the relevant connection profile and publish it that way.  So if you could create a connection profile specifically for that application, you can p...

Hi,Do you mean via the webvpn portal or via the AnyConnect client?Cheers,Neil

Hi James,It sounds to me as if the address that is being used as the source of the tunnel at the spoke end might be getting NAT'd and is therefore not reachable.  What output do you get from deb ip nhrp and deb tunnel on the hub?  Also, if you could ...

Is the local DNS part of the domain? I would normally expect your DC to be running DNS as well. Are there any acls in the way?

Probably because if you're in the AD domain, the local dns server will resolve the names for you.