If your VPN is connecting to static IP:port then you can limit VPN qube connections to this IP:port like this:
And you can block forward traffic outside of the VPN like this: