Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Is it possible to set up 2fa for anyconnect? The secondary authentication would need to be used as a text message to employees corporate cell phone number for code retrial.
Check DUO Security, this has recently been purchased by Cisco. This can do MFA, using SMS, Phone Call back etc. It has a free version for up to 10 users, link here.