Seeking a few pointers on leveraging ISE monitoring APIs to quarantine/unquarantine hosts from a session management perspective. My ideal solution would be writing a python script that prompts the end user (Sys Admin/IA) for what they want to do (reauth/shut port). Then prompts for client mac OR IP. From here I would call separate functions based on the decision made & pass the input. Once the CoA is issued I would like to have some sort of confirmation that it was successful via another session update or potentially a sequence of pings. The only manual intervention would be having the end user move the comp object in AD into a separate security group so upon re-authz the host would move to the quarantine state (separate VN/sgt), and then of course the actual information provided for the script. The idea would solve an issue that requires several manual steps from an IA perspective.
FYI Currently running an ISE cluster on 2.4p9. I am going through documentation and realize both CoA can be accomplished via Session Disconnect Calls or Session Reauth calls. However, I do not see starting points for utilizing curl with json for those two types of calls. Any additional documentation I may have missed, or suggestions are appreciated.
