Software Secure Access
Activity Manage

Cisco Secure Access Help Secure Access NAT as a Service Reserved IP Calculate Your Maximum Sessions

Last updated: Aug 07, 2025

Calculate Your Maximum Sessions

Determine the maximum sessions available in a Secure Access instance.

This formula illustrates the way in which Reserved IP maps sessions to a single reserved IP.

sIP x sP x dIP x dP x nP
  • sIP (Source IP)— A single source IPv4 address. For example, use a value of 1. Secure Access supports more than one source IPv4 address at a time. The source IPv4 address is the egress IP from your organization's premises or from a roaming user device.
  • sP (Source Ports)—We do not restrict source ports. Use the value of 65536 for the full port range of 65,536 potential source ports.
  • dIP (Destination IPs)—The total number of destination IPs, which clients can use to establish a session. To determine the greatest number of sessions supported, use the total possible number of public IPv4 addresses 3,706,452,992. To determine the fewest number of sessions supported, use 1. A value of 1 emulates a fully qualified domain name (FQDN) that only supports a single IP address. All clients establish a session with the same FQDN.
  • dP (Destination Ports)—We do not restrict ports. Use the value of 65536 for the full port range of 65,536 destination ports.
  • nP (Number of Protocols)—Secure Access only supports TCP. Use a value of 1 for TCP.