How does this IE setting affect AnyConnect?
AnyConnect, like SVC, uses WinInet for the pretunnel connection. This is the connection that is used to perform the initial authentication and downloading of updates. WinInet is the programmatic interface that Internet Explorer also uses under the covers. WinInet exposes configuration via the options menu in IE. One of the items in this menu is to use http:1.1 over proxies. Therefore, when the VPNDownloader connects to the headend to perform validation, it does so via WinInet APIs. This is part of the pre-tunnel operation that occurs. The actual tunnel of data occurs over a separate channel that does not use WinInet, and it is this separate channel that only knows about ‘ProxyIP:ProxyTCPPort’. In short, think of the AnyConnect GUI / VPNDownloader and the browser launch as extensions of IE for the purposes of negotiating the tunnel connection. However, all tunnel data is done via a separate channel that does not use WinInet.
