cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
267
Views
0
Helpful
2
Replies

ISE 3.3 OpenAPI Profiler Policy Management to delete profiling policie

pabloayalas
Level 1
Level 1

Hello,

I am using Cisco ISE 3.3 and want to check if it's possible to delete profiling policies via OpenAPI. According to the documentation at https://developer.cisco.com/docs/identity-services-engine/latest/profiler-openapi/, there is an OpenAPI call that allows us to get, update, or delete a profiler policy. However, I cannot retrieve any policies using either name or ID.

Actually, I might be completely wrong, and it might not even be possible. I want to reduce the number of unused profiles that we added some time ago and are no longer in use. 

Thanks

2 Replies 2

Greg Gibbs
Cisco Employee
Cisco Employee

I suspect that Profiler API endpoint documentation is related to a feature that is currently being developed.

I do not see that available in the on-box Swagger interface for any currently shipping versions of ISE (3.3p7, 3.4p3) and I get a 404 response when trying to use those APIs.

Yeah, that's what I noticed as well. The main issue is that Cisco documentation doesn't specify that this is under development or that it will be enabled with a newer version of the code. Also, if I check lower versions than 3.1 inside the same documentation, it doesn't specify that the profiler library is not available. 

I just tried sending a query using the following:

curl --location -v -k -u 'username:password' \
'https://ise.local:443/api/v1/profiler/policy?name=2Wire-Device&id=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx' \
--header 'Accept: application/json' \
--header 'Cookie: APPSESSIONID=XXXXXX'

And this is the output:

* Request completely sent off
< HTTP/1.1 404
< Content-Type: application/json
< Content-Length: 0
< Connection: keep-alive
< Cache-Control: no-cache, no-store, must-revalidate

If this is not supported, then let me ask you this question: do you know any fast way to delete profiles that we are not using and might never use?