Record the current mode
Google lists Off, Automatic and provider-hostname options. Private DNS protects DNS queries and replies, not all traffic. Menus vary; search device settings for Private DNS.
Change one condition at a time
- Record the original mode and hostname, checking it against your selected DNS provider documentation; keep internal addresses private.
- Keep Wi-Fi, VPN route and target page fixed and note the exact error and time.
- If you entered a custom hostname, temporarily try Automatic with the same page, retaining the original setting for rollback.
- Record whether access returns. If it does not, restore the original setting and check another page.
- Send the comparison and OS version to support without treating one recovery as a universal fix.
Interpret the comparison
Failure only in custom mode is a reason to investigate that hostname and its reachability, not proof of a broken VPN route. Ask the administrator about managed-device policies. This guide does not require permanently disabling Private DNS or promise a provider will work.