"If this is set to "ANY", typically, a member would use its LAN/VIP (on an HA pair)." Thanks man, this config did the trick! Changed ANY for the correct interface in my enviroment (MGMT in my case) and everything worked.
1. Based on match-clients list, your client IP falls in the wrong DNS View, where recursion is disabled. AND/OR 2. You are in the right DNS View but recursion is disabled. AND/OR 3. You IP is denied by an ACL. Best Regards, Bibin Thomas