How can I prevent any automatic unsolicited network connections?

At the time of writing, this is unsupported.

Same replies as here:
Outbound traffic security: Kicksecure and Qubes

Related:
Kicksecure Firewall