Passing of traffic during a policy mismatch between key server and group member

Currently, packets that do not match the traffic policy provided by the group key server are dropped by default. You have an option to change the default behavior to disable encryption and forward the packets instead of dropping them. You can configure the forward-policy-mismatch within the group vpn object configuration to enable the support for forwarding policy-mismatched packets at the [edit security group-vpn member ipsec] hierarchy level.