As for DNS, I do not want to use UDM's deployment or catergories - I like Cleanbrowsing's logging, filtering, and whitelisting, and I want my clients (both local to my network and when away on a guest wifi or cellular) to always use Cleanbrowsing. But since different groups use a different DNS...