Try having the user manually run the /opt/cisco/secureclient/bin/Cisco
Secure Client - AnyConnect VPN Service.app, we found that the installer
often fails to do this as the user, but everything else is usually in
place.We added a separate postinstall...
