Cisco AnyConnect Secure Mobility Client uses IKEv2 for one group of users and SSL for another group. However, IKEv2 does not support client software updates, which means that when the administrator configures a new AnyConnect release on the Cisco ASA, the IKEv2 users cannot download it automatically when they connect.