IP Layer Enforcement with the Cisco Umbrella Roaming Security module
IP Layer Enforcement is currently not available for the AnyConnect Umbrella roaming module. It is exclusively available for the standalone roaming client.
AnyConnect: Cisco Umbrella Roaming Security Client Administrator Guide < IP Layer Enforcement > Frequently Asked Questions