topic How to pull endpoint information from API using IPAddress or netbios name. in Network Access Control

How to pull endpoint information from API using IPAddress or netbios name.

pshourie@cisco.com — Wed, 13 Mar 2019 21:18:00 GMT

Management API only searches the database for the latest session that contains the specified NAS IP address.

https://<ISEhost>/admin/API/mnt/Session/IPAddress/<nasipaddress>

How about Endpoint(s) that failed authentication or are no more in active session ?

Will pxGrid contain that information ?

Will next ISE API version support it ?

Re: How to pull endpoint information from API using IPAddress or netbios name.

paul — Thu, 14 Mar 2019 03:06:52 GMT

None of the good data about an endpoint is available via API calls. Cisco believe that all their profiling data is the key to the product and will not expose it other than the ISE EAT tool (https://iseeat.cisco.com/). I dont know about the future of the API, but the data you can get about an endpoint is minimal (very frustrating that this is true).

Query the M&T for current session data is terrible for anything other than a small deployment. I tried collecting MAC to IP mappings from the M&T API calls on a larger install and it was taking 10-20 seconds per query to get an answer for one MAC address. I swear the M&T was going through its table line by line, "Is this the right MAC?", "Nope", "Is this the right one?"

Re: How to pull endpoint information from API using IPAddress or netbios name.

Damien Miller — Thu, 14 Mar 2019 11:00:14 GMT

Based on the mnt reporting performance I have seen, it wouldn't surprise me.

Re: How to pull endpoint information from API using IPAddress or netbios name.

Jason Kunst — Thu, 14 Mar 2019 14:18:10 GMT

thanks guys, please do get the information over to http://cs.co/ise-feedback for cisco internal use http://cs.co/ise-pm