ISE user session limit with ASA-5555 SSL VPN

[tareinma]

Hi Expert,

My customer would like to limit the number of simultaneous VPN sessions by ISE. They want only one simultaneous session per user. The customer ISE version is 1.2,  Is it supported or upgrading required ?

Regards,

Tanawin

[Jason Kunst · Accepted solution]

There is no way to limit this on ISE. 

How to limit maximum SSL VPN sessions per group-policy on ASA5510? | VPN | Cisco Support Community | 6001 | 11669181

[tareinma]

Hi Jason,

Thanks for advice. Unfortunately 2 units of ASA are  deployed as VPN cluster. We found that if two users use the same username to logon VPN simultaneously.The first user will login VPN on ASA unit 1 and second user will login VPN on ASA unit 2. 

Even I put the command " vpn-simultaneous-logins 1 " under group policy. VPN cluster will have two simultaneous session per user. I think that each ASA doesn't share the user session.

How we can acrhive  this requirement under this environment ?

[Jason Kunst]

please reach out to ASA team this is ISE forum