Yes, the broadcaster only stores the primary DNS server, not the secondary server. The DHCP server pulling should work without any issues.
Outside port 80 (for retrieving it's time) and 1935 (for streaming), it also uses port 443 for SSL communication to our servers. Please make sure port 443 is also open.
We are looking into adding a second DNS server. Since we got this request multiple times.