03-05-2018 07:01 AM
Hello ISE Experts,
CU ist migrating from ACS 5.8 to ISE 2.3
For MAB they currently use in ACS the Monitoring and Report Viewer Web Services - getAuthenticationStatusByTimeUnit() - to generate internal tickets for failed MAB requests. Additional a daily report is generated to document the failed MAB requests via this function.
From ISE API-Documentation I didn't found any reference to get failed Radius authentication requests via API.
Anything I missed here ?
Any hints and tips welcome.
Thanks in advance
-Dieter
Solved! Go to Solution.
03-06-2018 11:27 PM
Hi Krishnan,
thx.
I saw this "Authentication Status API" Call but unfortunately you can get only the status of a specific MAC not for
generating status information for all MAC's in a defined time range.
Anyway we found a solution with Syslog-Splunk to get the needed informations.
-Dieter
03-06-2018 10:12 AM
You are correct that ISE is NOT offering such web services as ACS Monitoring and Report Viewer Web Services as external API.
03-06-2018 12:32 PM
That said, you can use ISE Monitoring REST APIs for looking at auth status failures and for troubleshooting. There are just API’s for monitoring only.
Here is the link for that
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/api_ref_guide/api_ref_book/ise_api_ref_ch3.html
-Krishnan
03-06-2018 11:27 PM
Hi Krishnan,
thx.
I saw this "Authentication Status API" Call but unfortunately you can get only the status of a specific MAC not for
generating status information for all MAC's in a defined time range.
Anyway we found a solution with Syslog-Splunk to get the needed informations.
-Dieter
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide