Cisco ISE Monitoring API - Different number of active endpoints from ISE UI?

[ShuningWu14393]

We used this request on Monitoring API to get the session active list: https://<ISEhost>/admin/API/mnt/Session/ActiveList 

Generally, we get about 11K active endpoints or MAC addresses from this active list.

However, if we go to the Cisco ISE UI dashboard, the number of active endpoints is always different (around 13-14K), as shown below:

Why would this happen? Shouldn't the active list be consistent between Monitoring API and ISE UI?

[thomas]

The values in ISE dashboard today are based on Context Visibility, which counts sessions differently than M&T.

The benefit is that it's faster in the dashboard but the down-side is some inconsistency.

[ShuningWu14393]

Thanks for the reply! Then which one is more accurate? Monitoring or ISE dashboard?

[thomas · Accepted solution]

The MNT node is tracking actual RADIUS Accounting Start/Stop messages from the network devices which define Sessions so it should be the most accurate.