We're in the process of migrating some users from the Cisco IPSEC VPN client to AnyConnect. Using the same Connection Profile for both ipsec and AnyConnect, everything seems to to work fine (as far as access to inside resources). However, the clients are unable to connect to the internet while using a statically assigned PAC file for proxy connections (no split tunneling and not setting the PAC URL from the ASA Group Policy). The use of the PAC file works fine when connected to the ipsec client but doesn't work with AnyConnect. I can statically set one of the proxy servers in the the browser settings and it works...it's just the use of the PAC file. Is there anything specific to AnyConnect (version 3.1) that would interfer with PAC files?