How does Firepass determine the FQDN of connecting machine?

Hi!     We have our firepass working with a pre-logon endpoint inspection of a machine certificate (does the standard check of CN equal to FQDN). However, my CISO is asking how the Firepass...