TZ670 - Laptops outside the network only accessing to the internet by VPN
This is my 1st post. I hope that I'm doing in the correct section.
I don't know if its possible or not, but did anyone ever created a "rule" that laptops that are outside of the domain network can only access the internet if they turn on the SSL VPN?
I'm asking this because I'm about to change the firewalls of a company from Draytek to TZ670.
The same company will also get all the services for the TZ670, with that comes all the protections.
They've on-prem sophos anti-virus, but with TZ670 I won't be needing it, and since it needs to be renewed soon, they might not do it.
That's why I'm asking if is there a way to prevent company laptops outside of the network to only be able to access the internet with the SSL VPN working.