Hello Mr Greenwood,My apologies it's not out yet. Here are the release notes for 3.8.4 in the meantime. https://community.cisco.com/t5/secure-access-software-release-notes/release-of-virtual-appliance-dns-forwarder-version-3-8-4/ta-p/5370640Kind Reg...

Hello Patrick,No that is not normal it should be on the latest release 3.8.5. Open a support ticket and we can get you fixed up. 

They will continue to function normally. The problem only exists when you try installing the older version as a new setup in U3.

Are you deploying via MS Intune?