Testing virtualized, 2 processors, 2 GB RAM given to the device.
After updating the host box and rebooting the system traffic was unable to pass through the content filter, though DNS did resolve, and pings as well as other traffic were passing through the device.
Restarting web security resolved the issue.
I remember seeing this issue in previous versions where the content filter would start before DNS was available.
To duplicate, reboot and have downstream DNS not immediately available.