CISCO ISE NAD API export for scheduled nackup

[curlytopzzz]

Is there an API to export the NAD database w/ complete device details? I was hoping to see detailed information per devices.

By Get I can only have an output(sample):

"SearchResult": {
"total": 122,
"resources": [
{
"id": "0667bc80-78a9-11eb-b987-005056aba98b",
"name": "ISE_EST_Local_Host",
"description": "",
"link": {
"rel": "self",
"href": "https://ise.securitydemo.net:9060/ers/config/networkdevice/0667bc80-78a9-11eb-b987-005056aba98b",
"type": "application/json"
}
},
{
"id": "28ea0480-9699-11eb-90bd-5ee2604c17c3",
"name": "ams-3650-1",
"description": "none",
"link": {
"rel": "self",
"href": "https://ise.securitydemo.net:9060/ers/config/networkdevice/28ea0480-9699-11eb-90bd-5ee2604c17c3",
"type": "application/json"
}
},

[davidgfriedman]

I would love this as well.  I don't need a full database export, just select fields for a RISK analysis I perform on any fingerprint based policies if we need to go that route.  Additionally, we were doing an upgrade to v2.7 last week and found the OUI field is different. I'd love as simple way to pull down just MAC Address and OUI so I could compare them with a quickie PERL scripts for both platforms (old/new, due to HW upgrade at the same time for this cluster) in one quick process.

thanks,
David

[Greg Gibbs · Accepted solution]

@curlytopzzz There is not a single API that provides the full details of the Network Devices. You would need to create a script that executes the GET API for the network devices, captures each individual 'id' or 'name' value, then executes the GET by id/name on each one to capture the details.

See the additional info on DevNet:

https://developer.cisco.com/docs/identity-services-engine/v1/#!networkdevice

@davidgfriedman the same applies for gathering endpoint details

https://developer.cisco.com/docs/identity-services-engine/v1/#!endpoint