This isn't a functionality that's built into the firewall, nor would it be something that would be easily implemented. You could hypothetically script something that tracks users using the firewall's API and past a certain number of associations start clearing the mapping, but there's some disadvantages to that method and quite a few things that would need to heavily rely on how you have things architected on your network.
A better way of attempting to do this would be setting up GlobalProtect and enforcing a connection. This would allow you to actually script a limit of connections any one user can have and disconnect any new connections past what you're limiting it to.
Obviously this would again have to be considered in conjunction with your network requirements and how you actually have things setup. This is also another solution that currently relies on external scripts to accomplish this behavior, as it's not supported by the firewall by default.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!