Symptom

Certificate mapping for SSL is configured differently than certificate mapping for IPsec. For IPsec, it is configured using 'tunnel-group-map' rules in global config mode. For SSL, it is configured using 'certificate-group-map' under webvpn config mode. Certificate group map is happening correctly for ssl ut not ipsec

Conditions

using certificate group mapping for ipsec ra vpn

Workaround

Use flexconfig to deploy it. tunnel-group-map enable rules tunnel-group-map 10

Further Problem Description