Forticlient - Deny network connection when VPN not established

Hi!

I want to use Forticlient for some Roadwarrior-Notebooks. The goal is, that they cannot use any "unsafe" internet connection.

--> Deny any network-traffic except the connection to the Fortigate without VPN

--> Allow network traffic through the Fortigate

The notebooks should be usable in the home-offices of my users, hotels, etc, which are not trusted.

Can you give me a hint on how to do that?

Thank you!

Regards,

KPS