@NorthernNetGuy this is normal behaviour with unified policy and mentioned in Limitations for Mobile Access in the Unified Policy
„The Native Applications button always shows in the Mobile Access Portal when SSL Network Extender is enabled“
You can restrict the access but the button will be always there.
Using the „old“ way with MobileAccess policy in SmartDashboard you can make the connect button invisible to users without rights to access. But then you loose the better features of the unified policy.