[iavael]

For wireguard they usually intercept handshake packets. There's no significant differences from tcp-based VPN protocols in this regard.