Ensure BYO devices with Encrypted Client Hello (ECH) are filtered