How reliable is the VPN Client "Kill Switch" feature?

Follow

fyrekcaz

• July 23, 2025 21:56

I'm looking at setting up the VPN Client on my Firewalla Purple to route through NordVPN and I'm curious how reliable of a "Kill Switch" I can setup using the Policy Based Routing? 

Basically I want to route ALL the traffic for my guests through the VPN - and - I don't want to have to worry about babysitting it. 

If I use the "Static" setting will it accurately block anything coming from the "Guest" group if NordVPN disconnects or is there a more surefire way to do this?

I only want it for the single group -- personal devices I want to connect as normal. 

Thank you so much!

0

• 

  Firewalla

  • July 23, 2025 23:07

  The best way is to "assign" devices to the VPN client (via the VPN client settings). 

  Policy Based Routing also works, but it is very flexible, and depend on how you are routing, you may miss traffic. (unless you route everything from a device)

  0

  Comment actions Permalink
• 

  fyrekcaz

  • July 23, 2025 23:49

  Awesome - so - just assigning the device to the VPN guarantees that no traffic gets out of it, even if it disconnects? 

  0

  Comment actions Permalink
• 

  Firewalla

  • July 24, 2025 03:25

  yes, that's the "kill switch"

  0

  Comment actions Permalink
• 

  fyrekcaz

  • August 05, 2025 20:44

  Got it. Is it worthwhile to setup two different OpenVPN profiles for NordVPN to have one for fallover?

  0

  Comment actions Permalink
• 

  FirewallaSupportDesk

  • August 08, 2025 07:47

  Yes, failover is always a good practice. We recommend using VPN Group for Failover. 

  0

  Comment actions Permalink

Please sign in to leave a comment.