If firewalla gold uses unbound it may be rebind protection blocking your requests. I ran into the issue with pfsense and it was very frustrating.

The fix for me was adding the domains to a config file for 'private-domain' before unbound would forward it.