topic ISE API for session time in Network Access Control

ISE API for session time

Narayan Subramanian — Thu, 30 Aug 2018 05:44:47 GMT

Is there a way i can get the below details through an API call in ISE

1) Client login and logout time – total logged in time

2) SGT which the client belongs to

any documentation around this would be helpful

thanks

Re: ISE API for session time

hslai — Thu, 30 Aug 2018 14:55:47 GMT

While the session is active, we may use Detailed Session Attribute API Calls. And, no info once the session removed from ISE session directory.

You may deduce the login or logout time and total session time from ISE RADIUS accounting reports.

The other option is to use pxGrid.

Re: ISE API for session time

Narayan Subramanian — Mon, 03 Sep 2018 13:49:14 GMT

Can you point me to an example of how this can be seen through pxgrid

Re: ISE API for session time

hslai — Mon, 03 Sep 2018 15:18:17 GMT

For pxGrid, please refer to the guides @ Cisco Platform Exchange Grid (pxGrid).

Another alternative is use a remote syslog target (e.g. Splunk) to receive RADIUS accounting events and some other program to digest the events and come up with the info you asked about.