This counter tracks session setup attempts for this group that were declined due to local policy, explicitly including rate-control settings per the desc. An admin seeing this rise for a specific group can check whether an aggressive rate-limit or connection-throttling policy configured for that group is now blocking legitimate connection attempts during peak hours. A sales team's VPN group hitting a rate-control-triggered decline spike every Monday morning would suggest the throttle threshold needs to be raised for that group.