topic Re: Cisco ISE API - Download file from local disk ISE in Network Access Control

Cisco ISE API - Download file from local disk ISE

yayaa — Thu, 16 Mar 2023 15:23:13 GMT

Hello,

I want to download the local backup file via HTTP / HTTPS using my Linux server. I have Python installed on my Linux server so I thought I would be able to use the REST API on ISE to download this file. HTTP/HTTPS repository is not supported on Cisco ISE 2.7, and other protocols I am not able to use. So thought of this way to make local ISE backups and than create a script to download this via the REST API. I am fairly new to scripting with API's and have basic Python knowledge. This looks to me a simple exercise but not sure where to start. Anyone with an example that can advice me ? Thanks in advance

Re: Cisco ISE API - Download file from local disk ISE

davidgfriedman — Thu, 16 Mar 2023 16:01:14 GMT

Deleted, re-read and I was not commenting on the same topic. 😞

Re: Cisco ISE API - Download file from local disk ISE

thomas — Mon, 20 Mar 2023 18:49:35 GMT

While HTTP/S POST could be used to upload a backup file, there is no standard POST request across any servers for handling file uploads. I would love to hear how you would expect this to work on any random Apache or NGINX web server. Maybe then you could request it it as an enhancement @ https://cs.co/ise-wish

You may certainly trigger a backup in ISE via REST API to your repository of choice including the LOCALDISK.

curl --include --insecure --location \ --header 'Accept: application/json' \ --header 'Content-Type: application/json' \ --user $ISE_USERNAME:$ISE_PASSWORD \ --request POST https://$ISE_HOSTNAME/api/v1/backup-restore/config/backup \ --data ' { "backupEncryptionKey": "$ISE_BACKUP_ENCRYPTION_KEY", "backupName": "My_Backup", "repositoryName": "My_Repository" }'

However there is no REST API for downloading from the LOCALDISK once the backup is completed. You would need to do it via the GUI. For API download support from the LOCALDISK, you would need to make a feature request @ https://cs.co/ise-wish

Re: Cisco ISE API - Download file from local disk ISE

yayaa — Thu, 16 Mar 2023 16:22:44 GMT

Thanks for your feedback Thomas! What if I schedule a local backup via ISE GUI and create another script on my Linux server using python to transfer this file to my Linux server using the REST API ? Could I do that? If so, how would I be able to transfer this file via the REST API to my linux server? Thanks for the feedback!

Re: Cisco ISE API - Download file from local disk ISE

Rob Ingram — Thu, 16 Mar 2023 16:25:42 GMT

@yayaa why not just setup your linux server as the remote repository in ISE, to push the backup?

Re: Cisco ISE API - Download file from local disk ISE

davidgfriedman — Fri, 17 Mar 2023 10:58:23 GMT

He wrote version 2.7, is that API available in 2.7? If so, doc links please.

Re: Cisco ISE API - Download file from local disk ISE

thomas — Mon, 20 Mar 2023 18:54:19 GMT

Yeah, sorry, David, the ISE Backup API is supported from ISE 3.1+ :

https://cs.co/ise-api > Versioning

Re: Cisco ISE API - Download file from local disk ISE

thomas — Mon, 20 Mar 2023 19:01:49 GMT

Backups MUST be done to an ISE Repository using a supported protocol. See the ISE Administrator Guide for all supported ISE repository types.

You may initiate a backup via the REST API call above - using ISE 3.1+ (sorry, not 2.7) - to a supported ISE repository that you configured but not HTTP repositories because they are Read-Only as the table above shows.

Again, no API exists for transferring data from the LOCALDISK repository - you would need to make a feature request @ https://cs.co/ise-wish

Re: Cisco ISE API - Download file from local disk ISE

yayaa — Thu, 23 Mar 2023 09:15:14 GMT

Thanks for the feedback that is clear. Unfortunately it's not possible in my situation to use the other protocols for backup so was looking for a workaround.

Thread may be closed. Thank you all.