Isolate internet browsing during VPN connection

[alimedlej]

I'm asking if there any idea to disconnect the user from surfing internet when using FortiClient for VPN connection.

My case is : I have an SD-WAN connection, and i need to connect through VPN from a branch to our Head Quarter, during VPN connection i need to prevent the user from connection and surfing internet. 

Is there any idea

[hubertzw]

There must be a firewall policy which permits the traffic (interface: vpn - Internet port). So, specify to which destination the VPN users should be allowed. 

[alimedlej]

Thank you for your reply, i have some details. The PC will be used for web browsing, in the same time should be connected through VPN to reach a branch. Internet connection user access will be managed by another firewall rather than fortigate. VPN connection access will be managed by a fortigate firewall with Forticlient software. In this case is there any idea to disable internet connection during VPN connection.