Software Secure Access
Activity Manage

Cisco Secure Access Help Network Requirements for Secure Access Secure Access DNS Resolvers

Last updated: Aug 07, 2025

Secure Access DNS Resolvers

Required by applications or devices connecting to the Secure Access DNS resolvers, including Cisco Secure Client deployments with the Umbrella Roaming Security module (DNS-layer security).

IPv4 IPv6 Port/Protocol Description
208.67.222.222 2620:119:35::35 53 TCP/UDP Primary
208.67.220.220 2620:119:53::53 53 TCP/UDP Secondary
208.67.222.220 n/a 53 TCP/UDP Tertiary
208.67.220.222 n/a 53 TCP/UDP Quaternary
208.67.221.76 2620:119:17::76 53 TCP/UDP USA only Primary (For more information, see Best Practices.)
208.67.223.76 2620:119:76::76 53 TCP/UDP USA only Secondary (For more information, see Best Practices.)
208.67.222.64 2620.119.53::64 53 TCP/UDP DNS64 Primary (For more information, see Best Practices.)
208.67.220.64 2620:119:53::64 53 TCP/UDP DNS64 Secondary (For more information, see Best Practices.)
146.112.70.70 2a04:e4c0:170::170 53 TCP/UDP Saudi Arabia-Alternate Primary
146.112.71.71 2a04:e4c0:171::171 53 TCP/UDP Saudi Arabia-Alternate Secondary