Rule Enforcement with Destination Lists and Fully Qualified Domain Names
Important: You can add destination lists that include fully qualified domain names (FQDNs) on internet access rules. To enforce the internet access rules with the destination lists and FQDNs, Secure Access requires that all DNS queries for these FQDNs use the Secure Access DNS servers. For more information, see Manage End-User Connectivity and Manage DNS Servers.
For information about decryption, see Security Profiles for Internet Access and Manage Traffic Decryption.