Cisco Cisco Clean Access 3.5

You can view the IP addresses used for the DNS host when clients connect to the host to update their 
systems. Note that these IP addresses are viewed per Clean Access Server from the CAS management 
pages. 

Go to Device Management > CCA Servers > Manage [CAS_IP] > Filter > Roles > Allowed 
Hosts.

To view all IP addresses for DNS hosts accessed across all roles, click the View Current IP 
addresses for All Roles at the top of the page. 

To view the IP addresses for DNS hosts accessed by clients in a specific role, click the View Current 
IP addresses link next to the desired role. 

The IP Address, Host Name, and Expire Time will display for each IP address accessed. Note that 
the Expire Time is based on the DNS reply TTL. When the IP address for the DNS host reaches the 
Expire Time, it becomes invalid.

To troubleshoot host-based policy access, try performing an 

from a command 

prompt of the test client machine. Cisco Clean Access needs to see DNS responses before putting 
corresponding IP addresses on the allow list.