For the sake of simplicity, at least until you know it works, or not, I’d make rules for:
C:\Program Files\VPN4ALL\vpn4all.exe
and
C:\Program Files\VPN4ALL\Connect\openvpn.exe
Outgoing only. To do this you can use the pre-defind policy - see image.
[attachment deleted by admin]