The tunnel was open. The "Deep Story"—years of archived research and encrypted secrets—began to flow through the secure channel, invisible to the watchers outside. Technical Reality of Kerio Control 9.4.2 In the real world, Kerio Control 9.4.2
# Block all non-VPN traffic if tunnel drops New-NetFirewallRule -DisplayName "Kerio Kill Switch" -Direction Outbound -Action Block -RemoteAddress "0.0.0.0/0" -InterfaceAlias "!Kerio VPN Adapter"