Please check by creating the DNS service base firewall rule as shown below and create separate application filter policy to block high risk application as per link and apply on same DNS service base firewall rule.
Please check by creating the DNS service base firewall rule as shown below and create separate application filter policy to block high risk application as per link and apply on same DNS service base firewall rule.