Thanks for taking time to look into it Portu!
Here is the tunnel-group config
sh run tunnel-group USERTunnelGroup
tunnel-group USERTunnelGroup type remote-access
tunnel-group USERTunnelGroup general-attributes
address-pool USERDHCPPool1
authentication-server-group SSL-VPN
default-group-policy USERGP
tunnel-group USERTunnelGroup webvpn-attributes
customization USERCustom
authentication aaa certificate
group-alias /USERTunnelGroup disable
group-alias USERTunnelGroup disable
group-alias Full_Tunnel disable
group-alias WIndows7_MAC disable
group-url enable
See attachment for debug outputs.
Here is the group-policy:
sh run group-policy USERGP
group-policy USERGP internal
group-policy USERGP attributes
wins-server value
dns-server value
vpn-access-hours none
vpn-simultaneous-logins 3
vpn-idle-timeout 45
vpn-session-timeout none
vpn-filter none
ipv6-vpn-filter none
vpn-tunnel-protocol ssl-client ssl-clientless
split-tunnel-policy tunnelall
split-tunnel-network-list none
default-domain value
vlan none
nac-settings none
smartcard-removal-disconnect enable
webvpn
url-list value USER
filter none
homepage none
anyconnect ssl dtls enable
anyconnect mtu 1406
anyconnect firewall-rule client-interface public none
anyconnect firewall-rule client-interface private none
anyconnect keep-installer installed
anyconnect ssl keepalive 20
anyconnect ssl rekey time none
anyconnect ssl rekey method none
anyconnect dpd-interval client 10
anyconnect dpd-interval gateway 10
anyconnect ssl compression deflate
anyconnect profiles value USERVPNCLient type user
anyconnect ask none default webvpn
customization value USERCustom
activex-relay enable
url-entry enable
smart-tunnel auto-signon disable
anyconnect ssl df-bit-ignore disable
always-on-vpn profile-settingup enable
