A network engineer configured Secure Client VPN for a vendor to provide access to internal resources for a migration project. A pool of 192.168.100.0/28 has been assigned and a local database for user

Adding users to the local database affects authentication eligibility but would not cause disconnections if the users were already authenticating successfully before the disconnections began.

The pool 192.168.100.0/28 has 16 total addresses but only 14 usable host IPs (subtracting network and broadcast addresses). With 16 engineers needing concurrent VPN sessions, the pool is exhausted - new connection attempts either fail or force existing sessions to drop, which explains the disconnections after expanding from 10 to 16 users. Expanding the pool to a larger subnet resolves the exhaustion.

Cisco ASA Secure Client licenses control the maximum number of concurrent SSL VPN sessions the platform supports, but the symptom here matches IP pool exhaustion (only 14 IPs for 16 users) rather than a license limit breach.

The Cisco Secure Client version on user machines does not affect whether the ASA can assign an IP address from the pool; upgrading the client version would not resolve an address exhaustion problem.