Just install Wireguard, all app can bypass CIS firewall. when CIS support it ?