I upgraded the Firmware to 4.3.2.5/v23 which has the Cyren replacement.

I set the Firewall >> General Setup to WCF_Filter and DNS_Filter everything seemed Ok. I could login to Netflix (bit slow) on Apple TV then randomly could play anything. I disabled the DNS_Filter and could stream Ok.
I created a keyword object netflix and a CSM>>URL>>Content Filter set to pass.
I can now stream on Netflix
Contacted Draytek they recommended login MyVigor and resync the licence.

In the CSM Web Content Filter selected gambling, tried to go to a gambling site and it's blocked. In the log reports [CSM_WF][Block][Service_Provider=URL Reputation][Cache Match][Category=Gambling]

I never see anything or more likely don't know how a DNS filter reports blocking. Can anyone recommend how to test the DNS_Filter