Hello madmorf,
Without knowing the exact rules you see I don't have much sensible stuff to say. I can tell you there are rules that change based on load on OpenVPN daemons, to do a type of load-balancing. And that there are rules that apply only if certain users are actively logged on or not. So those might be possible explanations. If you can elaborate, also on version of Access Server used, and which users are connected at the time, and what their access rules are, we could probably take a look and make some sensible determination. But for that kind of sensitive information I'd suggest to use the support ticket system at
https://openvpn.net/support
Good luck,
Johan
