auto init tunnel based on connectivity?

Is there any support in the win32client to actually force the tunnel if some criteria is true (in my case, machine is not present on internal network) to enforce policy that machine is only allowed to...