Hi Dan,
I'm afraid it won't be possible unless you use CSD to detect the version the client is running.
There is an enhancement reuqest to have this feature implemented but unfortunately, it is still in new state:
CSCtc87347 DAP:Parse AnyConnect user agent (OS and version) without the need for CSD
Regards,
Nicolas