How to block all traffic except VPN on MacBook?

Question

macOS

Hey!
It is necessary to prepare a MacBook on Monterey for an employee who will be without root rights. On a work laptop, you need to disable all Internet traffic, with the exception of to / through VPN. I have no experience with Apple products, how can this be done?

Tried:
- lulu - poor in settings, could not implement
- little-snitch - seems to be possible to implement using profiles, but stopped by the fact that it can be disabled by a normal user without root.
- there are no commands familiar to me, such as iptables, ipfw.

Answer 1

https://crypted.com/mac-security/command-line-fire...