If the compliance module version on the local machine is newer than the one configured on the ISE server, AnyConnect may fail as it cannot downgrade the module.