topic Simultaneous Clientless SSL connections in Network Security

Simultaneous Clientless SSL connections

mark.a.coleman — Mon, 11 Mar 2019 20:45:13 GMT

I've setup access via our ASA5510 portal which is working fine but I can't seem to connectto the ASA when there are two active connections. If there is only one, it's fine.

I've read about this:

Problem - Unable to Connect More Than Three WEB VPN Users to PIX/ASA

Problem :

Only three WEB VPN clients can connect to ASA/PIX; the connection for the fourth client fails.

Solution :

In most cases, this issue is related to a simultaneous login setting within the group policy.

Use this illustration to configure the desired number of simultaneous logins. In this example, the desired value was 20.

ciscoasa(config)# group-policy Bryan attributes
ciscoasa(config-group-policy)# vpn-simultaneous-logins 20

Would this be the same thing?

If so how whould I check the existing setting in the GUI?

Thanks

Simultaneous Clientless SSL connections

Shrikant Sundaresh — Wed, 15 Jun 2011 21:17:37 GMT

Hi Mark,

Since you mentioned that the limit is 2, I feel it would most probably be a license issue.

The ASA base license allows only 2 SSL VPN peers by default.

You can check this by running the "show version" command on the ASA CLI, and going through the license details presented. Please let me know if this is not the case, and we can further troubleshoot the issue then.

Hope this helps.

-Shrikant

P.S.: Please mark this question as answered if it has been resolved. Do rate helpful posts. Thanks.

Simultaneous Clientless SSL connections

andamani — Thu, 16 Jun 2011 01:27:24 GMT

Hi Mark,

Have you purchased any SSL VPN or Anyconenct license?

By default the number of peers which can connect are 2 SSL VPN peers. any connection after these connections will be denied.

You can check the number of SSL VPN allowed from the "sh ver" of the ASA.

Here is a snip of "sh ver"

Device License - Security Plus

Maximum Physical Interface - Unlimited

Maximum VLANs - 100

Inside Hosts - Unlimited

Failover - Active/Active

VP-DES - Enabled

VPN-3DES-AES - Enabled

Security Contexts - 2

GTP/GPRS - Disabled

VPN Peers - 250

WebVPN Peers - 2

AnyConnect for Mobile - Disabled

AnyConnect for Linksys Phone - Disabled

Advanced Endpoint Assessment - Disabled

The field of concern will be WebVPN Peers or SSL VPN Peers.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Re: Simultaneous Clientless SSL connections

mark.a.coleman — Thu, 16 Jun 2011 10:36:58 GMT

Thanks to both of you.

Btw, I have an additional 25, but can't seem to find documentation on how to add them through the ASDM GUI

Re: Simultaneous Clientless SSL connections

andamani — Fri, 17 Jun 2011 04:59:55 GMT

hey,

try this.

Choose Configuration > Device Management > Licensing > Activation Key, and enter the new activation key that you obtained with the active unit serial number. Now click Update Activation Key

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Simultaneous Clientless SSL connections

mark.a.coleman — Fri, 17 Jun 2011 15:40:09 GMT

Thanks Anisha,

Is it likely the ASA will require a reboot after installing licenses?

Mark

Simultaneous Clientless SSL connections

andamani — Sat, 18 Jun 2011 15:24:12 GMT

depends on the license. it will be mentioned in the license.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Simultaneous Clientless SSL connections

mark.a.coleman — Mon, 20 Jun 2011 08:54:09 GMT

That's why I asked, it mentions on the license that it may require a reboot. I was just hoping I'd could get a more definitive answer so I can schedule any downtime.