I am interested in using the recently-introduced IOS-XE AnyConnect (in SSL VPN mode) feature. However, can SSLVPN support multi-tenants; i.e. can VPN client sessions be dropped into different VRFs (ideally through the use of RADIUS attributes)?
I know that when using IKEv2, a virtual template can be specified, and RADIUS attributes passed back to reconfigure virtual-access interface into a specific VRF. Is it possible to achieve something similar using AnyConnect in SSL mode?