Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I faced same problem. There was an error in the authorization policy on ACS. We use cisco-av-pair and there was a mistake in one rule of de ACL on Radius attribute.
After correct that, client VPN could connect.