Block Page IP Addresses

When Secure Access blocks a domain or URL, the Secure Access DNS servers display a block page instead of the requested page. Secure Access provides different types of block pages depending on the security event.

IP Addresses for Secure Access Block Pages

The following table describes the types of block pages, DNS record types, and Anycast IP addresses for the Secure Access servers.

Block Page TypeRecord TypeIP Address
Domain ListA146.112.61.113
Domain ListAAAA:ffff:146.112.61.113
Command and Control CallbackA146.112.61.114
Command and Control CallbackAAAA::ffff:146.112.61.114
Content Category or ApplicationA146.112.61.115
Content Category or ApplicationAAAA::ffff:146.112.61.115
MalwareA146.112.61.116
MalwareAAAA::ffff:146.112.61.116
PhishingA146.112.61.117
PhishingAAAA::ffff:146.112.61.117
Security Integrations, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, and Dynamic DNSA146.112.61.119
Security Integrations, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, and Dynamic DNSAAAA::ffff:146.112.61.119

Domains for Secure Access Block Pages

Secure Access displays block pages on these domains:

  • block.sse.cisco.com
  • phishing.block.sse.cisco.com
  • malware.block.sse.cisco.com


Allow Users to Contact an Administrator < Block Page IP Addresses > Manage Traffic Decryption