cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

318
Views
5
Helpful
2
Replies
Highlighted
Beginner

Using ERS API to pull authc and authz policy details

How would I go about pulling policy information through the ERS API's? 

 

I've got a working python script that I have successfully pulled the EndPoint profile by searching with the Endpoint ID MAC address:

https://<ise admin fqdn>:9060/ers/config/endpoint/?filter=mac.EQ.d4:be:d9:80:79:4b

From there I can find dig out the profileid and use that to look up end point profile

https://<ise admin fqdn>:9060/ers/config/profilerprofile/4408bf10-222f-11e6-99ab-005056bf55e0

 

I've been searching through the ERS SDK docs, but can't find any relevant info for looking up other info such as is seen on the ISE Admin portal when looking at the Operations/Radius/Live Logs screen.

 

TIA,

John

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Beginner

Re: Using ERS API to pull authc and authz policy details

Cannot fetch those details using ERS API which accesses the ISE endpoint DB from PAN/PSN nodes, but can fetch active session details using Monitoring REST API from MNT node.  Other ways to fetch, albeit not API, is the Get All Endpoints dump from PAN CLI (app config ise), or the Endpoint Analysis Tool.

 

/Craig

View solution in original post

2 REPLIES 2
Highlighted
Beginner

Re: Using ERS API to pull authc and authz policy details

Cannot fetch those details using ERS API which accesses the ISE endpoint DB from PAN/PSN nodes, but can fetch active session details using Monitoring REST API from MNT node.  Other ways to fetch, albeit not API, is the Get All Endpoints dump from PAN CLI (app config ise), or the Endpoint Analysis Tool.

 

/Craig

View solution in original post

Beginner

Re: Using ERS API to pull authc and authz policy details

Thanks.  Looks like I can get at least most of the info I was after with the Monitoring REST APIs.

-John