It happened again on Monday and Tuesday "error:login exceeds maximum allowed users" when I checked it with stat AAA and nsconmsg I could see it going over 1000 for current Smart access AAA connections so wasn't related to the storefront server issue. We have took on a few extra users and it looks like more and more are working from home. I have set the NS GW vserver into ICA only mode as it's only used for ICA proxy (No smart control or smart access and we have a separate NS GW vserver for VPN so that should fix it