Symptom

After some time, users are unable to establish new AnyConnect sessions when using Multi-context.

Conditions

SESS_Mgmt_CheckLicenseLimitReached: Session manager and Resource manager are out of sync! SESS_Util_ValidateLicense: License unavailable SESS_Mgmt_CreateSessionWithAuditId: License request failed AnyConnect client will show error: Failed to create session manager entry When running debug aaa shim, will see the following message: AAA/SHIM: Failed to create unlicensed session entry

Workaround

Clear VPN sessions with the command: vpn-session logoff all Note this will also clear legitimate AnyConnect sessions as well

Further Problem Description