uncategorized blocking well known domains, including sophos

I had uncategorized sites blocked in dns protection. But along with blocking OneDrive sync, it was also blocking Sophos community.  

Even after allowing uncategorized, I still had to add a domain exception for sophos.com.  

I also had to add exceptions for my domain and some of my client's domains, even though in sophos firewall and intercept-x I don't have a problem blocking uncategorized sites.