Hi Ryan Liu,Answering your question:Can I do something to make this situation into drop VPN connection if it can't match any mapping rule?As you correctly described, if the certificate mapping rules don't match, the user will land in the Default Grou...