You could set up the guest WiFi and under “VPN Policies” set “Use VPN for guest network” off. It’s more like a hack though.