The selected DNS servers must be accessible without a proxy, as Cryptographic Security Platform cannot access a DNS server through a proxy.