Controller Based WLANs

Q:

How to block all outbound traffic from client machine until VIA forms IPSEC tunnel on windows VIA 2.3.4 ?

Block-All-Traffic feature adds the ability for VIA client to block all outbound traffic from a client machine until the tunnel is established. This feature prevents the user from accessing the Internet until VIA connection is established.

An exception can be created by configuring a whitelist on the controller. Traffic to the IP address configured in the whitelist will be allowed.

aaa authentication via connection-profile "default"
  allow-whitelist-traffic
  whitelist addr 215.50.25.26 netmask 255.255.255.0 desc "test" position 0

This is support from controller 6.4.x and for now we can specify only ip address not hostname