The killswitch in v4.7.x has the highest priority, which will override the clients do not use to VPN, so that clients that do not go to VPN will drop the Internet connection after enabled the killswitch. This is a normal behavior in v4.7.x.
The v4.8.0 will improve this part:
You can create a new tunnel, specify that the clients do not go to vpn, and adjust the priority to higher