Reserved IP Address in Cisco Secure Access

[Edsnow]

Hi, 

If we purchased a Reserved Egress IP Address in Cisco Secure Internet Access, Is it possible that we route some traffic through reserved IP address some traffic through shared IP address ?

[Aref Alsouqi]

I don't think that is possible, I think once the dedicated IP is deployed to your organization any web traffic will be sourced from that IP.

[Royalty]

Hi @Edsnow,

I agree with Aref. The Reserved IP is associated with a specific Secure Access Region (geographic data center location) of Cisco's cloud SSE services

Any traffic that reaches or traverses through that Secure Access Region will use the Reserved IP assigned to the region. If your web traffic passes through a region where you haven’t provisioned a Reserved IP, it will instead use the shared IP range for that region. The choice of which Secure Access Region to use as ingress is dependent on your deployment method, e.g. Cisco Secure Access client vs branch IPSec Network Tunnel.

Attempting to perform traffic engineering to selectively route traffic through either the Reserved IP or the Shared IP based on the destination IP address/domain is not supported

The documentation below may be of use if you've not seen it already! See 'Reserved IP' and 'Secure NAT as a Service'

https://docs.sse.cisco.com/