Technical Tip: How many concurrent SSL VPN sessions are permitted on the FortiGate

Description

This article describes how many concurrent SSL VPN sessions are permitted on the FortiGate.

Scope

FortiGate.

Solution

There is no limitation on the number of concurrent SSL VPN sessions that can be open on the FortiGate. The number of sessions will, however, depend on available system resources, specifically memory.

Refer to the FortiGate model's datasheet and search for 'Concurrent SSL-VPN Users' to find the exact value.

By default, a local firewall user can authenticate from multiple devices/sessions simultaneously without issue, unless it is explicitly restricted.

FortiOS has a setting under user accounts called 'set limit-user-logins'. If it is configured this way, it can restrict the maximum number of concurrent logins per user (for example, 1, 2, etc.). If left at the default (unlimited), one account can be used for as many sessions as the box itself supports.