The issue is in the way AnyConnect processes the profile XML files. In our testing with ASDM 6.1 / ASA 8.0 and AnyConnect 2.4.0202 we have found that the profiles are processed in alphabetical order. So if a user is initially in a group with profile ...