Some apps bypass App Proxy Provider

Our product uses NETransparentProxyProvider in the
system extension. We have discovered that some apps (e.g. FaceTime) completely bypass our filter even if it is set to catch all.

Is it a bug or an expected behavior? We have not found any reference to this in the documentation.
Some apps bypass App Proxy Provider
 
 
Q