topic ISE Reporting - Last Time Device Logged Into Network in Network Access Control

ISE Reporting - Last Time Device Logged Into Network

Alex Pfeil — Tue, 13 Feb 2018 21:43:50 GMT

I have some data purging setup to automatically purge devices when they are inactive for so long. I would like a report that will show me a list of statically profiled devices that are coming close to being purged or have not logged into the network in so many days. Any help would be greatly appreciated.

Thanks,

Alex

Re: ISE Reporting - Last Time Device Logged Into Network

Craig Hyps — Wed, 14 Feb 2018 15:03:32 GMT

You can get such a report by running the "Get All Endpoints" option from PAN CLI "application configure ise" or using the ISE Endpoint Analysis Tool (EAT) from iseeat.cisco.com

/Craig

Re: ISE Reporting - Last Time Device Logged Into Network

Alex Pfeil — Wed, 14 Feb 2018 15:06:35 GMT

I will give this a try!

Thank you for the reply and your time!

Re: ISE Reporting - Last Time Device Logged Into Network

Alex Pfeil — Wed, 14 Feb 2018 22:16:21 GMT

I updated this as the correct answer. I am not a Cisco employee so I had to use the Get all Endpoints option. However, that option has the info I need. Thanks again!!!

Re: ISE Reporting - Last Time Device Logged Into Network

Craig Hyps — Wed, 14 Feb 2018 22:20:53 GMT

You don't need to be a Cisco employee to download EAT, but you do need to register with a valid company address. We ask this to ensure we have actual customers leveraging the tool. If used a personal email account, you will be denied access. If still unable to register, let me know and I will try to track down the registration request.

Re: ISE Reporting - Last Time Device Logged Into Network

Alex Pfeil — Tue, 20 Feb 2018 21:40:41 GMT

Thank you for the response. So, I was able to download the tool. However, it seemed like doing the full export was better. Is the tool supposed to provide valuable insight into the database? I was failing to see the benefit of the tool.

Thanks,

Alex

Re: ISE Reporting - Last Time Device Logged Into Network

Craig Hyps — Tue, 20 Feb 2018 22:27:42 GMT

Both options export endpoint database details. If you were able to get the info you were looking for via the tools, then apparently have already proved their value. The use of tools are optional so no worries if not requiring the additional info. However, many customers have requested full access to endpoint details without having to individually drill down one endpoint at a time from UI. Export options from Admin UI or API do not provide this level of detail. Granted not all data is useful for most purposes, but can certainly be filtered to liking. Once in a CSV format, the data can be mined, charted, filtered, sorted as you like. I have found the tools indispensable for profiling and other use cases.

Re: ISE Reporting - Last Time Device Logged Into Network

Alex Pfeil — Fri, 23 Feb 2018 15:20:46 GMT

I have since used the tool for profiling and it was beneficial. I used the match policy column to move some of the statically configured devices over to different profiles. Thanks, again!