![](https://lemmy.sdf.org/pictrs/image/1e36e9bb-5d6a-4e1f-b995-e3344e9c7364.png)
![](https://lemm.ee/pictrs/image/2da4a776-3343-45c5-a85f-1b004a9d985c.jpeg)
I am not sure I understand your comment.
Blocking outgoing traffic blocks all outgoing traffic, thus including traffic outside of VPN.
Allowing outgoing connections to the VPN server simply makes an exception in that blocking, otherwise you couldn’t even connect to a VPN.
By the way, with some not so ancient devices you can search for the firmware here: https://software.cisco.com/download/home and at least get MD5 and SHA-512 hashes to verify the files you downloaded.
Not the case with this AP though.
Edit: Oh, I almost forgot. Also the exact filename. Makes it easy finding it online.