What version of AOS are you running ?
I noticed an issue on a code the other where the netservice svc-DNS wasn't working properly and I had to manually specify the ports in the acl ( Udp / 53 and tcp / 53 )
Confirm that the device doesn't have another DNS server in nic settings