ISE REST API for Endpoint lifecycle management

ataha — Tue, 31 Jul 2018 07:38:22 GMT

Request:
A potential customer wants to use ISE REST API for Enpoint Life-cycle management but currently it seems that there are some attributes missing:
- Timestamps (last seen, first seen)
- List all members of a specific Enpoint Group
Are we missing anything? In case the attributes are really missing, are there any plans to implement them in future releases?

Re: ISE REST API for Endpoint lifecycle management

Cory Peterson — Wed, 01 Aug 2018 19:09:12 GMT

Last/first seen is available if you do a full endpoint report export from the CLI, not the easiest place to get it, but it is there.

As for Group membership you should be able to pull that using an endpoint search based on the groupID.

The following two API calls can gather the needed info:

This will give you a list of all endpoint groups so you can find the groupId:

https://ise01.lab.local:9060/ers/config/endpointgroup

This will give you a list of the endpoint in the group:

https://ise01.lab.local:9060/ers/config/endpoint?page=1&size=50&filter=groupId.EQ.2f0fc9f0-222f-11e6-99ab-005056b55ff0

topic ISE REST API for Endpoint lifecycle management in Network Access Control

ISE REST API for Endpoint lifecycle management

Re: ISE REST API for Endpoint lifecycle management