topic Re: ISE ERS SGT API 403 Error in Network Access Control

ISE ERS SGT API 403 Error

Dolevha — Thu, 02 Jun 2022 09:27:09 GMT

Hey,

I'm using the ERS API on my ISE 2.4.0.357. Using GET requests work properly, but every post request I've tried in the trustsec calls returns a 403 Error:
ers/config/sgt
ers/config/sgacl

ers/config/egressmatrixcell

I've tried using POST on other parts of the API and it works:
ers/config/identitygroup
ers/config/networkdevice

The user I'm using has ERS admin permissions. I think these calls used to work a few months ago when I tried them but it doesn't work anymore.

Do you know what might be the reason for it? What troubleshoot actions can I take?

Thank you in advance,
Dolev

Re: ISE ERS SGT API 403 Error

Greg Gibbs — Thu, 02 Jun 2022 23:01:17 GMT

You might be hitting this bug - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu30286

If you're not running the latest patch (patch 14; likely the last patch for 2.4 due to the End of Software Maintenance lifecycle stage), try updating.

If that does not resolve the issue, you'll likely need to enable the debugs and look at the logs as per Troubleshoot and Enable Debugs on ISE.

Re: ISE ERS SGT API 403 Error

Dolevha — Mon, 06 Jun 2022 07:13:34 GMT

Thanks!

I changed my Trustsec configuration from multiple matrices to a single matrix and it solved the issue.