I would like internal users to be able to connect to the ASA's outside interface https server, to be able to download the AnyConnect client while in the office. Currently, this isn't working.
I've setup a static NAT entry with internal sources, and the outside/tcp/https as the destination. We've got an allow any any ACL on the inside interface. On the outside interface ACL, I've added ACEs for internal traffic to the outside interface https.
Running Wireshark from my workstation, I am seeingg RST, ACKs from the ASA when trying to connect to the https server.