Allow Downloading But Not Uploading

Highly unlikely - you have a better chance and more success with detecting/blocking endpoint VPN connections via app sensor and/or simply locking down (shutting down) unwanted/questionable port activity.  If you're in a network/company environment that requires DLP then perhaps endpoint security and other computer lockdowns methods are also in order.