On the Network template if you navigate to Security & Sd-wan. Then select Content filtering type https://dns.google/ in the URL box at the top and check. It will show you DoH and DoT are blocked under Category blocking.    Adding in case anyone else has the issue  ... View more