Troubleshooting:
- The user/group may not have access to LAN subnets. In our case, the client adds All Interface IP instead of LAN Subnets. We fix the problem by replacing All Interface IP with LAN Subnets.
2. The SSLVPN IP Pool is in the same subnet as X0.