Can the number of clientless SSL sessions be controlled by group-policy?

[lchance]

I've read where the ASA 5540 can handle up to 2,500 SSL connections.

We're buying license upgrades but now need to control the count of licensed sessions per group-policy.

For instance, Group-One can not use over 25 and Group-Two over 50 .etc.

Can this be controlled by group-policy or else AAA? It appears to me that in group-policy this might effect IPSEC also, which I wouldn't want.

[Yudong Wu]

For each group, you can define an address-pool with number of IP equal to the maximum session for that group.

In the meanwhile, you can config "vpn-simultaneous-logins" to control how many simultaneous login is allowed per user.