cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
503
Views
0
Helpful
3
Replies

How to pull endpoint information from API using IPAddress or netbios name.

pshourie@cisco.com
Cisco Employee
Cisco Employee

Management API only searches the database for the latest session that contains the specified NAS IP address.

https://<ISEhost>/admin/API/mnt/Session/IPAddress/<nasipaddress>

 

How about Endpoint(s) that failed authentication or are no more in active session ? 

 

Will pxGrid contain that information ?

 

Will next ISE API version support it ?

1 Accepted Solution

Accepted Solutions

paul
Level 10
Level 10

None of the good data about an endpoint is available via API calls.  Cisco believe that all their profiling data is the key to the product and will not expose it other than the ISE EAT tool (https://iseeat.cisco.com/).  I dont know about the future of the API, but the data you can get about an endpoint is minimal (very frustrating that this is true).

 

Query the M&T for current session data is terrible for anything other than a small deployment.  I tried collecting MAC to IP mappings from the M&T API calls on a larger install and it was taking 10-20 seconds per query to get an answer for one MAC address.  I swear the M&T was going through its table line by line, "Is this the right MAC?", "Nope", "Is this the right one?"

View solution in original post

3 Replies 3

paul
Level 10
Level 10

None of the good data about an endpoint is available via API calls.  Cisco believe that all their profiling data is the key to the product and will not expose it other than the ISE EAT tool (https://iseeat.cisco.com/).  I dont know about the future of the API, but the data you can get about an endpoint is minimal (very frustrating that this is true).

 

Query the M&T for current session data is terrible for anything other than a small deployment.  I tried collecting MAC to IP mappings from the M&T API calls on a larger install and it was taking 10-20 seconds per query to get an answer for one MAC address.  I swear the M&T was going through its table line by line, "Is this the right MAC?", "Nope", "Is this the right one?"

Based on the mnt reporting performance I have seen, it wouldn't surprise me.

thanks guys, please do get the information over to http://cs.co/ise-feedback for cisco internal use http://cs.co/ise-pm