Team, for this section: 'Group Policy applied to a client VPN user is associated with the username and not the device. Different devices that connect to client VPN with the same username will receive the same group policy." Can we add the part that explains that this is only true if we are tracking by mac. When tracking by mac, the "MAC" seen in the client page is a hash of the username and that is what allows the GP to be applied to a specific username.   When tracking by IP, that ability is lost - and unfortunately, it looks like there is no way to make a fixed association between username and IP. ... View more