Based on above debugs it looks ASA is sending out the Auth packet but dont see any response .
Please check if transit (isp) devices blocking udp500/4500 port in ASA--->Azure direction .
Please find the below bug
try with workaround mentioned in the bug
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwh14467
Workaround:
---Without changing files on the system---
Use a previous image for AnyConnect/Secure Client Image which is sm...
Kindly verify if the ASA has any AnyConnect Linux images configured in the webvpn section. AnyConnect VPN Management is not supported by Linux.
You can check if any Linux anyconnect images on ASA in below path
ASDM --> Configuration --> Remote Access...
If the certificate is not properly installed on the ASA, you cannot bind the trustpoint to the IKEv2 configuration.
Evidently, the certificate is not installed/missed based on the outputs shown above.
Please generate CSR and install the certificate ...
