ISE with API

[jiyoung Kim]

Hi, I'm testing ISE API call with getting all endpoints.

When I try it with POSTMAN on chrome, I got this error.

This seems to be like an error connecting to

https://10.10.10.50:9060/ers/config/internaluser

. The response status was 0.

Check out the

W3C XMLHttpRequest Level 2 spec for more details about when this happens.

I enabled ERS services, created ERS admin and I do not know what I should do more.

has anyone tried and succeed to use API ?

ISE version is 1.2.0.899 with patch 4

[jiyoung Kim]

Hi, It does populate description, id of end point, and name.

document says these are only popuated attributes at this time.

I dont know if they will make it popluate mac address ever or not.

[Naresh Ginjupalli]

Hi Jiyoung,

currently the output of the list all end points is populating only id of the end point as follows:

Name and descrption is not being displayed in the out put as per the document.

Here Name should be MAC address of the end point.

[Tarik Admani]

Naresh,

Do you think we cam also have the name and ID of the identity group also populated so we can see how the devices are profiled?


Sent from Cisco Technical Support Android App

[Naresh Ginjupalli]

Tarik,

Do you mean in the same call of list end point API. This may not be possible. Let me check and update

But we do have another call to get list of all end point Identity Groups.

application/vnd.com.cisco.ise.identity.identitygroup.1.0+xml'

'https://ers:Cisco123@10.105.170.61:9060/ers/config/identitygroup'

[Tarik Admani]

Yes,

The reason I was asking is that if we can query the endpoint identity group was to see how the devices are profiled.

I think the endpoint group id is sent in the endpoint query, I meant to ask if we can include the ip address or if possible could we generate an API call for a specific ip addresses?

This could help when relying on reporting from other applications that may generate security alerts.

Thanks,

Tarik Admani
*Please rate helpful posts*