Are there any Cisco ASA SSL VPN Gurus around? I'm looking for clarification on how (or perhaps more specifically where) to setup the DHCP associations on the Cisco ASA 5500 (v. 8.2(2)) platform for AnyConnect clients.

I have a local DHCP pool defined, and in my current deployment I have configured the association to a Group Policy as such:

Network (Client) Access > Group Policies > MyGrpPolicy > General > Address Pools

I was working with a TAC Engineer who noted this configuration and said that the recommended configuration should be to associate to a Connection Profile this way:

Network (Client) Access > AnyConnect Connection Profiles > MyWEBVPNGroup > Basic > Client Address Pools

I did some research online to try and validate this and in the "Cisco ASA 5500 SSL VPN Deployment Guide, Version 8.x", it instructs me to associate the address pool to the connection profile here:

Network (Client) Access > AnyConnect Connection Profiles > MyWEBVPNGroup > Advanced > Client Addressing

So you can see my confusion! There are three different approaches to handling the association of a DHCP pool to a Profile or Group, but I cannot find a reference that clearly explains the best practices or pros / cons of each method. Can somebody please advise?

Thanks in advance!