>The certificate on the secure gateway is invalid.   Are you using the AnyConnect auto-generate certificate on the MX.  If so, are you connecting to the dynamic DNS name?  If not, you'll get this error. ... View more

I have never done any additional configuration outside of installing the default options for the AnyConnect client so I don't think so.  How would I check if that is a setting? ... View more