As far as I know the VPN clients(anyconnect or ipsec) or the firewall doesn't have a restriction that every client that connects and establishes a VPN session should have a unique public ip address. Let me elaborate, if we have 10 people(contractors)...