Can access GUI on Cisco ISE only HTTP GET/POST ?

[jewfcb001]

We have a concern from the customer 

He need to access GUI on Cisco ISE only HTTP GET/POST . Can ise do that ? 

Please advise me . 

[balaji.bandi]

yes for your question.

you can find a good document here.

https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623

[jewfcb001]

Hi balaji ,
thank you for answer .
As your link is REST API ?

[balaji.bandi]

REST API covered.

another good reference :

http://www.network-node.com/blog/2016/4/19/restful-api-goodbye-click-click-click-click

[Mike.Cifelli]

Additional ISE API references:
Login to PAN SDK via this: https://<ise pan ip>:9060/ers/sdk#
https://community.cisco.com/t5/security-documents/ise-ers-api-examples/ta-p/3622623
https://community.cisco.com/t5/network-access-control/ise-api-filtering/m-p/4126088#U4126088
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/api_ref_guide/api_ref_book/ise_api_ref_ch1.html
HTH!

[jewfcb001]

Hi Mike ,

Thank you for your information . For CIsco ISE for HTTP GET/POST . Can we use only REST API for access ?
In case access Cisco ISE for manage . It use HTTPS to access . My understand is it correct ?

[Mike.Cifelli]

ISE ERS (external restful services) APIs are based on HTTPS and REST. The APIs allow you to perform CRUD operations (create, read, update, delete) via HTTP methods such as GET, POST, etc. Please see more detail via the links shared in the thread. HTH!

[Greg Gibbs]

The question is quite unclear, but it sounds like you're actually asking if you can access the ISE GUI using HTTP instead of HTTPS. If that is actually your question, the answer is No. ISE does not allow GUI access via HTTP and will redirect any HTTP requests to HTTPS.

[Jubei]

Based on your post, ISE only allows connections to the GUI via HTTPS. Do you know if DNA and prime operate the same way? I was looking for information in the deployment guides but couldn't find any. 

[Greg Gibbs]

HTTP is inherently insecure. I would be surprised if any Cisco platforms developed within the past 10 years would allow management via HTTP.