Thanks for your input, I tried readding the virtual-template under the webvpn context, however, no difference.
Basically both the virtual-template as well as the virtual-access stay down while a user is connected.
If you feel comfortable then you can post your config here (?) and I can take a look Or You can open a TAC case and continue from there.
Check the default gateway assigned to clients when full tunnel is used.
Is the one correct one ?
If not (other than .1) check this out