Guides
Secure Access Help Center

Enable Reporting for Private IP Address of Chromebook Device

Chromebook administrators can enable and display the private IP addresses of Chromebooks within the Secure Access Dashboard reports. This feature supports both Default and Managed Guest Session DoH templates.

To utilize this feature, copy the relevant DoH template from Secure Access, insert the private IP address, and update the modified template in the Google Admin console for the appropriate organizational unit. This will activate the configuration and enable the private IP address to appear in the reports on the Secure Access dashboard.

🚧

Important

Applying the new template with the 'DEVICE_IP_ADDRESSES' variable to Chromebooks running an OS version earlier than 126 will result in DoH resolution failure. This failure can lead to a potential loss of internet connectivity and DNS protection. Therefore, ensure that all Chromebooks are updated to ChromeOS 126 or later before implementing this feature to avoid these issues.

Prerequisites

  • Ensure your Chromebook is updated to Version 126 or later versions. For more information, look for the 'DEVICE_IP_ADDRESSES' term in the DnsOverHttpsTemplatesWithIdentifiers documentation.
  • Ensure that your Chromebooks are configured with a Managed Network as the 'DEVICE_IP_ADDRESSES' variable is supported only for Managed Networks. For more information on setting up Managed Networks, see the Set up networks for managed devices guide.

Procedure

  1. From Secure Access, navigate to Connect > End User Connectivity.
  2. On the End User Connectivity page, click the Internet Security tab.
  1. In the Deployment options section, click the ChromeOS tab.
  1. In the Chromebook Configuration section, click View.

  1. In the Configure Chromebooks window, click Copy to take a copy of the necessary DoH template URL. Then, add the 'DEVICE_IP_ADDRESSES' placeholder into the DoH template as illustrated in the example URLs below:

    Default DoH Template:

https://doh.sse.cisco.com/identity/v1/20292:4f444e53010000099997f7e840002147${USER_EMAIL}40002143${USER_EMAIL}${DEVICE_IP_ADDRESSES}/dns-query

Managed Guest/Public Session DoH Template:

https://doh.sse.cisco.com/identity/v1/20292:4f444e53010000099997f7e840002143${DEVICE_SERIAL_NUMBER}${DEVICE_IP_ADDRESSES}/dns-query

📘

Note

This is a sample URL. Use the actual DoH template from your organization’s Secure Access dashboard, ensuring the
'DEVICE_IP_ADDRESSES' placeholder is enclosed within ${} without any spaces.

  1. In the  Google Admin console, navigate to Devices > Chrome > Settings > Users & browser settings, choose the organizational unit (OU) on which you want to apply the template configuration, and select DNS-over-HTTPS with Identifiers.
  1. Enter the updated DoH template to the OU.

📘

Note

We recommend that you test enabling reporting for Private IP Address of Chromebook with a separate test OU before deployment.

After updating the DoH template, your Chromebook device is configured to report their private IP addresses to Secure Access. For assistance, contact Contact Cisco Secure Access Support.

Deploy the Cisco Security for Chromebooks Client < Enable Reporting for Private IP Address of Chromebook Device >Verify Cisco Security for Chromebooks Client Deployment

Updated about 2 months ago