I am seeing a lot of these messages from clients that are in the DHCP scope of our AnyConnect clients to many of our VMWare clients. Would there be any reason specifically for this that relates to how VMWare handles TCP? I am wondering if it's relate...

I was able to implement this via the ASDM GUI in the "configuration...threat detection" screen. From looking at your CLI command it would appear that 0 is not an option, you need to use an integer value between 1 and 3.