Comment by RegBarclay

I bought a Gryphon router to deal with this. It conditionally blocks VPN access by device/user. It's generally been really good, but I've had to back down some of the settings occasionally because school assignments/sites were blocked.