Filtering services rely on the appliance performing DNS resolution.
If an appliance has filtering configured, is configured as a client in a CERN or ICP hierarchy, and has the Must Only Forward through Hierarchy option checked in Hierarchy > ICP/CERN Configuration, it must be able to access a DNS server.
For more information on the Must Only Forward Through Hierarchy option, see ICP/CERN Configuration Tab.