I'm currently testing the new anyconnect version 4.10.05085 before we deploy it company wide from AnyConnect 4.10.01075 , we have noticed the new version has come back with this dreaded bug again, years ago it was because anyconnect was incompatible with ICS, all you had to do was uncheck it and Voila it's working again! this time around the service has to be disabled for it to work, normally this wouldn't be an issue, but we have Windows Defender ATP company wide, and if we disable ICS service we loose App Guard which is unacceptable seen as it was working in a previous version (AnyConnect 4.10.01075), question is; is it a bug? if so is Cisco looking into this as we cannot upgrade our clients until this is fixed.