Symptom
Deferrred Update condition not being effective when endpoint using Secure Client hit a Client Provisioning Policy which has configured a Compliance Module that is not supported for Secure Client
You'll receive the error "Cannot Install Compliance Module X.X.X.X because it requires Compliance Module version 4.3.2379.4353 or greater" for MacOS devices and "Cannot Install Compliance Module X.X.X.X because it requires Compliance Module version 4.3.2755.6145 or greater" for Windows devices
Conditions
Client Provisioning Policy being hit by endpoint has configured a Compliance Module which is not compatible with Secure Client (Windows and MacOS devices)
Workaround
Place a compliance module supported for Secure Client on the AnyConnect Configuration.
Further Problem Description
N/A