topic Re: Help with troubleshooting ISE pxGrid API? in Network Access Control

Help with troubleshooting ISE pxGrid API?

hnohre — Wed, 15 May 2019 15:39:05 GMT

I have a python app using ISE pxGrid interface. It used to work fine a while ago, but something changed.

Now I cannot do the Service Lookup, after sending the following:

url=https://10.1.41.70:8910/pxgrid/control/ServiceLookup
request={"name": "com.cisco.ise.session"}

I get

401 Unauthorized back from ISE.

I am using client cert to auth the session. Cert looks OK.

What could cause this request to fail? Which log files could give me further indications of what is wrong?

Re: Help with troubleshooting ISE pxGrid API?

Jason Kunst — Wed, 15 May 2019 15:45:44 GMT

Did you also check here?

https://developer.cisco.com/site/pxgrid/

Re: Help with troubleshooting ISE pxGrid API?

jeppich — Wed, 15 May 2019 21:43:45 GMT

Hey Hakan,

Are you able to see your client authenticated in Administration->pxGrid services->under all clients and are you also able to see your client under Web Clients.

Please unicast me directly and i will work with you.

Thanks,
John

jeppich@cisco.com

Re: Help with troubleshooting ISE pxGrid API?

mrimmune — Thu, 16 Jul 2020 05:35:50 GMT

Hi John

I have the same (close) issue with the integration of ISE with CyberVision:

pxgrid-agent Unable to activate account: Unable to send request: Post

https://ise.dclab.private:8910/pxgrid/control/AccountActivate: x509: certificate is valid for pxGrid, not ise.dclab.private [caller=pxgrid.go:37]

what type of log can I check for debugging this issue?

thanks

Michael

Re: Help with troubleshooting ISE pxGrid API?

mrimmune — Thu, 16 Jul 2020 12:11:06 GMT

Hi John,

please disregard previous note - the issue was with ISE PxGrid certificate.

Michael