Wireless Access

Am I right in thinking that each controller must be licensed individually to use VIA i.e. I need a PEFV license for all my controllers, regardless of centralised licensing?

Once enabled I am able to connect upto the amount specified for the "VPN Server Module" amount?

Correct, PEFV is not included in the centralized licensing setup.  You'll need PEFV on any controllers that will terminate VIA clients.    Once installed, the limit is based upon the number of IPsec tunnels the controller can support.

...also, if you plan on using HTTPS failback for VIA, those connections will consume 2 IPsec connections, so consider that in your maxium connection support per controller.

Perfect thank you

One more thing; if you run master/local topology, the master will also need PEFV on it to enable the VIA profiles (even if the controller will not terminate VIA clients).

We're running Master/Standby. I assume I still need two licenses in the event the master changes?

Yes; each controller in that case would need the license.