Network and Tunnel Identities for AnyConnect Users is now in Limited Availability.
Umbrella customers can apply network/tunnel based rulesets/rules to AnyConnect SWG installed computers when they're connected to a company network. This feature can now be requested through Support while it is in Limited Availability; it will also become generally available in the future.
In the past, web requests from the AnyConnect SWG module would not have network or tunnel identities applied to them. This meant it was difficult for customers to create flexible policies which behaved differently on and off the network. With this new feature, requests sent from the AnyConnect client will also have Network and Tunnel identities logged (if applicable).
However, this feature update may lead to a change in how the current rules and rulesets are being applied. Please review your rules and rulesets so that when this feature is enabled (either via a Support request or general availability), your web policy will be applied as intended.
For web policy and configuration, please see this article: Troubleshooting: Network and Tunnel Identities for AnyConnect Users.