Simple SNMP OID check for number of current SSL VPN clients. Set threshold somewhere near licensed VPN level...