0107149c:3: Virtual server /Common/new-panorama_ON has more than one clientssl/serverssl profile but none of them is default for SNI

Interesting. So I just tested, and my first option above doesn't work. However, you could use a TMSH transaction to make it happen:

!/bin/bash

tmsh << EOF
create cli transaction
modify ltm profile client-ssl test1-clientssl sni-default true
modify ltm profile client-ssl test2-clientssl sni-default false
submit cli transaction
EOF

This will change two client SSL profiles at the same time, allowing you to switch the "Default for SNI" option to another active profile.