Upto my knowledge, I think there is no limit per user on connections. Only a total of connections for all users at 2x the amount of memory. Also, PIX does not actually support session controls since it has no meaning to try to enforce a layer 2 restriction on layer 3 traffic - Normal Session control is used to enforce the number of Async or ISDN ports a user uses and not how many TCP sessions he has over it.
