Terminate a VPN Session using Cisco Identity Services Engine API v1

CiscoNewb001 — Fri, 07 Feb 2025 16:52:08 GMT

Hello, we have a web app used by our service desk to disable a compromised account, for example when a user clicks a phishing link.

I have been tasked with making this web app also "kick the user from the VPN". I am not a Cisco expert but they throw these docs at me and gave me a Username and API Key and I have been able to use Postman to make API calls successfully but I do not know what to call.

Im essentially looking for a POST https://test.ise.our-website:9060/ise/vpn/session/endsession?samaccountname=bob . Obviously that endpoint is not real, but that is essentially what I need.

Any help would be appreciated.

Re: Terminate a VPN Session using Cisco Identity Services Engine API v

bigevilbeard — Fri, 07 Feb 2025 18:26:40 GMT

Have a look at this section https://developer.cisco.com/docs/identity-services-engine/latest/get-user-by-id/ it shows how to get users, and then delete users. You can see the API endpoint and the details you need in these simple examples.

It looks to be a GET to list the users and then delete to this URI with the user id.

https://<ise-ip-address>:9060/ers/config/internaluser/<user-id>

Doc link is here https://developer.cisco.com/docs/identity-services-engine/latest/internaluser/

topic Terminate a VPN Session using Cisco Identity Services Engine API v1 in Network Access Control

Terminate a VPN Session using Cisco Identity Services Engine API v1

Re: Terminate a VPN Session using Cisco Identity Services Engine API v