allusers@any rules

[Spacetrucker]

Would someone explain the allusers@any rule or rules coming into play? I've seen several threads that mention these rules coming into play.

[dsb.nepo]

If the client is not connected the alluser@ comes in the game, this rule is also active if the client is connected so place this rule at the end of the rulest.
The UserGroup@ is only active if the client is connected.

You can see this behavor directly on the client if you start SR_Diagnostics.exe (there you can see the applied rules) then look at the rules connected/disconnected.

[Spacetrucker]

Is it safe to assume that all the user accounts you create in the firewall are automatically included in the allusers@any group?

[dsb.nepo]

Is it safe to assume that all the user accounts you create in the firewall are automatically included in the allusers@any group?

Yes, that's save.

Even Users not defined self at the firewall, for example *generic users over radius match allusers@