How to determine which Group Policy & ACL anyconnect VPN is using?

[jmaxwellUSAF]

Hello.

To configure an anyconnect split-tunnel within a very large ASA config, how do I determine which Group Policy and ACL is associated with the anyconnect VPN?

Within the below snippet, if this was associated with anyconnect, wouldnt this say "ssl", and not " l2tp-ipsec" ?

config snippet below...

-----

group-policy GROUP_POLICY_A internal
group-policy GROUP_POLICY_A attributes
dns-server value 10.0.0.1 10.0.0.2
dhcp-network-scope 10.0.20.0
vpn-simultaneous-logins 10
vpn-idle-timeout 45
vpn-tunnel-protocol l2tp-ipsec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value SPLIT_TUNNEL-1
default-domain value MYCOMPANY.com
webvpn
anyconnect mtu 1500

-----

Thank you!

[MHM Cisco World]

show vpn-dbsession 

this give you detail about group the user join. 
vpn tunnel for this case must be ssl.

[jmaxwellUSAF]

In the below snippet of GROUP_POLICY_A, if this is not the anyconnect group policy, why exists the "webvpn" line?

group-policy GROUP_POLICY_A internal
group-policy GROUP_POLICY_A attributes
dns-server value 10.0.0.1 10.0.0.2
dhcp-network-scope 10.0.20.0
vpn-simultaneous-logins 10
vpn-idle-timeout 45
vpn-tunnel-protocol l2tp-ipsec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value SPLIT_TUNNEL-1
default-domain value MYCOMPANY.com
webvpn
anyconnect mtu 1500

[MHM Cisco World]

if this group policy use for tunnel-group cover both SS and l2tp-ipsec then you can config vpn-tunnel=protocol l2tp-ipsec + ssl, if this group-policy for only tunnel=group of l2tp/ipsec then tunnel protocol must be only l2tp-ipsec.

webvpn you mention is not config under group-policy 

[jmaxwellUSAF · Accepted solution]

This command solved this question:  show vpn-sessiondb anyconnect

Thank you sir!