A customer of mine is using ASA CX together with CDA to extract the user-to-IP address mappings. The interaction between CX and CDA is configured and works properly, yet the policies will sometimes not work as intended. We then figured out that CDA w...