Yep, it is not bypassed by default.So why wasn't that caught during internal testing or nightly flighting? Why was it so hard to reproduce?
Is it not bypassed by default?
This is due to how DNS filtering works:Why would it bypass to a non-existing server and not system default, why would it "bypass to" anything? Shouldn't bypass mean "absolutely don't touch at all"? At least that's what the feature description says.
DNS was excluded from the regular apps management rules.And why wasn't this an issue in 3.2.135 and all previous builds?