If both CTF and FA were active with NAT acceleration it was probably the flow acceleration (FA). FA was so flaky and unstable for me I enabled traffic statistics and rebooted to only have CTF. Now perfectly stable. No issues with Anyconnect for me with this setup on my 68U. Any chance of getting a setting to just disable FA?