The Virtual IPS Sensor can have many concurrent connections at any given time. It is recommended to restrict SSH access to Virtual IPS Sensor to provide security to the Sensor. You can restrict the access by allowing only certain network range or IP address(es) to login to the Sensor. You can add the network range and IP address(es) (IPv4 and IPv6 addresses) in the Advanced Device Settings page of the Manager which restricts the number of SSH connections. The IP address of the client trying to connect to the Sensor should be added to the list so that only those valid IP addresses are allowed to access the Sensor. You can add it at the global level for an admin domain or at the device level.
To add the network range or IP address for SSH access to the Sensor, see the section Configure advanced device settings in Trellix Intrusion Prevention System Product Guide.