Hey Sean, Not sure if this will assist, but we had the same sort of issues using global protect (we don't use anyconnect) Fault finding was done on the PAN's, by monitoring the IP address of the VPN client and watching all the deny traffic inbound/ou...