Hi Martin, I am interested to know if you tested with Anyconnect to push dACLto the users.  And, your setup, is: ISE and DUO? or vice-versa.   My main goal is to be able to authenticate Anyconnect, with DUO and ISE (which is working) but I cannot pus...