Bypass Application Control for client IP

Hello Community,

Is there a way to create a "bypass" for Application Control in Sophos Firewall that is applied to a client IP address?  In the old UTM 9 interface, I used to be able to assign hosts to bypass lists, which would bypass all Application Control for that particular client IP.  How can I achieve the same effect in Sophos Firewall?  We have company employees who need to have their certain computer and phone IP addresses not being blocked by any Application Control policies.

Thanks in advance!