Anybody exploring automating ISE operations

[umahar]

Are their any tools out there which can be explored to automate ISE operations ?

A customer of mine has integrated all of their switches with ansible and pointed out there is no ISE module available in ansible.

My understanding is ansible mainly works for CLI based devices.

The customer wanted to know if there are modules out there which can be used to atleast manage CLI configuration via ansible.

I did point out that ISE operations are mainly done by GUI and hence it may not make sense to explore CLI automation options.

[kthiruve · Accepted solution]

HI Utkarsh,

Here is the CLI reference guide

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/cli_guide/b_ise_CLIReferenceGuide_24/b_ise_CLIReferenceGuide_24_c…

Here is the API doc you could use to automate configuration in ISE.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/api_ref_guide/api_ref_book/ise_api_ref_ers1.html

You can also see monitoring API that can be used to monitor ISE.

If you have the ISE server, browse to PAN UI port 9060 for SDK.

https://(PAN):9060/ers/sdk

Mostly it is key to understand what customers need to do for ISE operations.

Most of the operations can be done using API since ISE is an enterprise appliance not a switch or a router.

Here is a community site on ISE operations that will give you a good idea on that topic

ISE Operations

Thanks

Krishnan