This read-write TruthValue decides whether traffic that doesn't match any configured policy rule is forwarded normally or blocked outright. This default-behavior setting matters because it determines the fail-safe posture of the device's policy engine for any traffic the admin hasn't explicitly classified. For example, setting this to false on a security-focused deployment ensures any traffic not matching an explicit allow rule is silently dropped rather than passed through.