Use a firewall policy default stateless action settings to specify what to do with a packet when it doesn't match any of the criteria that's defined in the stateless rule group rules.