This article describes why the DNS filter profile cannot be selected in the policy.
Scope
FortiProxy.
Solution
DNS filter profile is not supported in Explicit, FTP, SSH Tunnel, SSH Proxy, and Wanopt policy. The DNS filter profile is only available in the Transparent policy.
