Hi @CHaywood - I had the same question initially! From my experience, this is intentional as the device blocks known encrypted DNS traffic endpoints so that the content filter/security subscription cannot be circumvented. Without this block, users could still open whatever they content they like as the encrypted DNS traffic cannot be inspected by the device.
... View more