>2) Not sure how would Anyconnect work in this scenario, incase of a failover.   AnyConnect works fine.  MX does a DDNS update to xxx.dynamic-m.com whenever a WAN interface becomes the new primary.  Within 10 minutes, clients will see the new IP address and be able to re-connect. ... View more