After a long time trobleshooting McAfee ZTNA Zero-Trust Network Access was preventing UDP 443 on local PC.

Anyconnect keeps reconnecting at the begging of connection is most probably cause of DTLS tunnel negotiation.Disable DTLS on FW and try again.

I have tried from Windows CMD scp and works:Working CMD directory where the file exist. Below example for transfer SSM_On-Prem-9-202502_Upgrade.shscp -okexalgorithms=diffie-hellman-group14-sha256 -o hostKeyAlgorithms=rsa-sha2-256 -O SSM_On-Prem-9-202...

You are so smart as your Cisco team.

I completely agree with you, especially if it's WAN exposed to internet. I would not recommend to use netconf. Cisco wake-up and provide a better solution.