Neither the documentation nor the app explains exactly the firewall rules (eg. isolate, exclude, bypass universal). For example, it is not obvious what the difference between "isolate" and "exclude" is, given that there is a "bypass" rule, too.