Cyberoam cannot authenticate users without IP address while as per the strict policy, unauthenticated users will not be leased IP address. And hence, even the DHCP traffic is dropped.
To avoid this situation,create following firewall rule to permit DHCP traffic without authentication:
LAN: Any Host
WAN: Any Host