topic Re: ISE Reporting interface via API in Network Access Control

ISE Reporting interface via API

Arne Bier — Thu, 08 Nov 2018 00:31:13 GMT

I could not find any ISE ERS API that allows me to perform reports (e.g. like the standard GUI Reports "top Authorizations by user". Did I perhaps not look in the right place? Is the Oracle DB accessible at all?

I can't find the answers I need from the inbuilt Reports 😞 - this "top" report is great because it filters on unique users - but it's limited by the filter criteria.

Re: ISE Reporting interface via API

kthiruve — Thu, 08 Nov 2018 02:03:58 GMT

Arne,

We have the monitoring API's that helps you with session management, CoA and troubleshooting.

This seems like a feature request and I can forward that to PM. Can you work with channel to provide more specifics?

Thanks

Krishnan

Re: ISE Reporting interface via API

Damien Miller — Thu, 08 Nov 2018 02:15:54 GMT

If you jailbreak ISE you can do it 😉

On a more serious note, we've been building a reporting database/tool internally. It's relatively crude though, it takes scheduled authentication reports and endpoint context visibility exports as inputs. From there we can report remediation status pre enforcement on a per site basis with endpoint context.

Biggest challenge we have is telling a client what will break if we enable "enforcement" today.