We are using AnyConnect on Mac. There is no policy for system scan and umbrella is inactive. Anyway, the client always shows a red x as status (which seems to be the roaming security status), altough the vpn is successfully connected and we never used roaming security.
Can this be fixed, to show only the vpn status and correctly reflect this in the icon?
Uninstalling the unwanted modules may only be temporary if the VPN headend is configured to install them. In that case, they will reappear upon next connection.
How did you get AnyConnect on the Mac in the first place? The answer to that helps guide us to an answer that will be a permanent resolution of your issue.
If the software is being installed via JAMF then most likely the admin has built the package incorrectly. There are command line options you should specify when doing an installation from the dmg file. You can download and reinstall manually if you have access to the cisco.com page for AnyConnect / Secure Client. However if JAMF detects that variation from the (incorrect) desired state it will try to put it back the way it is now.