Don't use Filter A Query Only option when you run NxFilter on cloud.

[support200]

We have Filter A Query Only option to reduce the amount of traffic data. It will reduce the load for NxFilter as well. However, if you run it on cloud with the option enabled, you might be under DNS attack. Your NxFilter bypasses those other types of queries from filtering and you can't block the traffic from DNS attackers when they use one of those other types as they bypass filtering.

With v4.6.3.2 of NxFilter and NxCloud, we will move the bypassing routine to be after Global Whitelist and Request Type Control so that you can block those attackers. Until then, we recommend you to disable the option.

[support200]

This one has been fixed by v4.6.3.2 of NxFilter and NxCloud.