topic Re: Can access GUI on Cisco ISE only HTTP GET/POST ? in Network Access Control

Can access GUI on Cisco ISE only HTTP GET/POST ?

jewfcb001 — Wed, 29 Jul 2020 06:00:59 GMT

We have a concern from the customer

He need to access GUI on Cisco ISE only HTTP GET/POST . Can ise do that ?

Please advise me .

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

balaji.bandi — Wed, 29 Jul 2020 06:11:40 GMT

yes for your question.

you can find a good document here.

https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

jewfcb001 — Wed, 29 Jul 2020 06:39:41 GMT

Hi balaji ,
thank you for answer .
As your link is REST API ?

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

balaji.bandi — Wed, 29 Jul 2020 07:45:08 GMT

REST API covered.

another good reference :

http://www.network-node.com/blog/2016/4/19/restful-api-goodbye-click-click-click-click

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

Mike.Cifelli — Wed, 29 Jul 2020 13:06:18 GMT

Additional ISE API references:
Login to PAN SDK via this: https://<ise pan ip>:9060/ers/sdk#
https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623
https://community.cisco.com/t5/network-access-control/ise-api-filtering/m-p/4126088#U4126088
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/api_ref_guide/api_ref_book/ise_api_ref_ch1.html
HTH!

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

jewfcb001 — Thu, 30 Jul 2020 09:29:17 GMT

Hi Mike ,

Thank you for your information . For CIsco ISE for HTTP GET/POST . Can we use only REST API for access ?
In case access Cisco ISE for manage . It use HTTPS to access . My understand is it correct ?

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

Mike.Cifelli — Thu, 30 Jul 2020 12:14:41 GMT

ISE ERS (external restful services) APIs are based on HTTPS and REST. The APIs allow you to perform CRUD operations (create, read, update, delete) via HTTP methods such as GET, POST, etc. Please see more detail via the links shared in the thread. HTH!

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

Greg Gibbs — Thu, 30 Jul 2020 23:19:29 GMT

The question is quite unclear, but it sounds like you're actually asking if you can access the ISE GUI using HTTP instead of HTTPS. If that is actually your question, the answer is No. ISE does not allow GUI access via HTTP and will redirect any HTTP requests to HTTPS.

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

Jubei — Mon, 18 Mar 2024 21:51:58 GMT

Based on your post, ISE only allows connections to the GUI via HTTPS. Do you know if DNA and prime operate the same way? I was looking for information in the deployment guides but couldn't find any.

Re: Can access GUI on Cisco ISE only HTTP GET/POST ?

Greg Gibbs — Mon, 18 Mar 2024 22:17:08 GMT

HTTP is inherently insecure. I would be surprised if any Cisco platforms developed within the past 10 years would allow management via HTTP.