Cisco ISE API - ERS Endpoint - How to get its AuthorizationProfile ID?

[ShuningWu14393]

Hi, 

We try to get the AuthorizationProfile ID for ERS endpoint through Cisco ISE API, but we can't find the linkage between endpoint and authorization profile. The profileId listed in ERSEndpoint seems to be the "Profiler" profile ID, not the authorization profile ID we need. 

Any help would be appreciated. 

Thanks!

[martin.fischer · Accepted solution]

Hi @ShuningWu14393 

I'm not sure whether I understand your question correctly, but you can use the following call to see which authorization profiles got applied to a session:

https://{mnt-host}/admin/API/mnt/AuthStatus/MACAddress/{mac}/{seconds}/{logcount}/All

In the response you should see the applied authorization profiles:  <selected_azn_profiles>value</selected_azn_profiles>

[ShuningWu14393]

Thanks! Basically what I want to get is something like this:

For an ERS endpoint, get its

• Mac Address
• IP Address
• Authorization Profile ID

[ShuningWu14393]

Yes, We find the information from this monitoring API, thanks much!!!!

By the way, this is the curl command we found from another post, and it helps too:

curl -s -k --header 'Accept: application/xml' --user admin:C1sco12345 https://198.18.133.27/admin/API/mnt/AuthStatus/MACAddress/DE:AD:BE:EF:CA:FE/3600/100/All
 

[ShuningWu14393]

We see another issue today, there are over 90000 endpoints from ERS endpoint API, but we only find about 3000 profile records from AuthStatus, does this mean that only 3000 endpoints are active and authorized? 

[ak698w]

I've run this API command and it has returned many records, only a few have <selected_azn_profiles> value for a given mac address. Is there a way to make this more consistent?