Hahaha, that resolved it! I can now confirm it is working with version 16.11 and AnyConnect Client v4.10.00093.    Those that use different CA, you can convert certificates manually with certutil.     certutil -encode filename.cer newfilename.cer       Thanks everyone! ... View more

You could configure Windows 10 NRPT - DNS resolution policy.   Configure the policy to send voipserver.company.com to public DNS servers (like 8.8.8.8) and let everything use the default configured DNS servers. ... View more