Outbound policy for Netflix device in Expert Mode avoids Speedfusion, uses only [WAN] connections locally, and works. This is particular to [IP address] source so a streaming device can be isolated. I haven’t figured out how to isolate the traffic by domain for the source so this is a challenge if you run streaming apps on a general purpose device as an app or in a browser. Just drag the rule above the PepVPN line. Simple.
Does anyone know how to define a source by traffic type rather than device IP so that streaming on a computer will work?