Cisco ASA licensing + Anyconnect VPN simultaneous users question

M1LEN · ‎03-11-2020

Hello,

I am struggling to find out the number of total users that can use anyconnect VPN. Below is partial show version plus the group-policy.
So we have 2500 users that are the max number, but if I have 3 simultaneous logins per user

Does it mean if I every VPN user account is shared between three people - I can have a total of 7500 anyconnect sessions ?

Is this achievable or not? :) How can I figure this out .

Thanks for any feedback!

####

group-policy Company-Access internal
group-policy Company-Access attributes
banner none
wins-server none
vpn-simultaneous-logins 3
vpn-session-timeout 1440

#########

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 300 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 2500 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 2500 perpetual
Total VPN Peers : 2500 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
IPS Module : Disabled perpetual
Cluster : Enabled perpetual
Cluster Members : 2 perpetual

This platform has an ASA5545 VPN Premium license.

The Running Activation Key feature: 5000 AnyConnect Premium sessions exceed the limit on the platform, reduced to 2500 AnyConnect Premium sessions.

#########

Cheers,
Milen

balaji.bandi · ‎03-11-2020

As per my understand you can have any numbers of users, as per your license you can have concurrent of 2500 users.

tcmckay · ‎03-11-2020

In my environment we have 100 licenses so we can only have 100 concurrent users. At present each user is only allocated 1 device that can connect to the vpn so they can only have 1 active session and all sessions expire after 13 hours to help keep everything secure. The ASA can handle more concurrent sessions, however, our licensing won't allow any past the 100 active.

Cristian Matei · ‎03-11-2020

Hi,

Your ASA model supports max 2500 concurrent sessions, so if you need 7500 concurrent sessions, you would need either one bigger platform that supports minimum 7500 sessions, or buy 2 more additional ASA's of same model and configure VPN load-balancing.

Regards,

Cristian Matei.