Symptom:
After ASA is crashed and failover is triggrered, syslog 106103 starts to be logged more frequently on the new active ASA and the log shows that user`s traffic is blocked by a vpn-filter which is not configured under group-policy the user is using.

Conditions:
It happened with many users and various group-pollicy in which vpn-filter was configured. But even if there was a huge amount of logs showing that users were blocked by incorrect vpn-filter, the users appeared to have the correct filter applied and were not getting access blocked to resources that they needed. So it is considered the syslog is just reporting the incorrect vpn-filter.