Refer to the exhibit.

An administrator had the above configuration working with SSL protocol, but as soon as the
administrator specified IPsec as the primary protocol, the Cisco AnyConnect client was not able
to connect. What is the problem?

A.
IPsec will not work in conjunction with a group URL.

B.
The Cisco AnyConnect implementation does not allow the two group URLs to be the same.
SSL does allow this.

C.
If you specify the primary protocol as IPsec, the User Group must be the exact name of the
connection profile (tunnel group).

D.
A new XML profile should be created instead of modifying the existing profile, so that the
clients force the update.