cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
799
Views
5
Helpful
2
Replies

Using ERS API to pull authc and authz policy details

johnlhawley
Level 1
Level 1

How would I go about pulling policy information through the ERS API's? 

 

I've got a working python script that I have successfully pulled the EndPoint profile by searching with the Endpoint ID MAC address:

https://<ise admin fqdn>:9060/ers/config/endpoint/?filter=mac.EQ.d4:be:d9:80:79:4b

From there I can find dig out the profileid and use that to look up end point profile

https://<ise admin fqdn>:9060/ers/config/profilerprofile/4408bf10-222f-11e6-99ab-005056bf55e0

 

I've been searching through the ERS SDK docs, but can't find any relevant info for looking up other info such as is seen on the ISE Admin portal when looking at the Operations/Radius/Live Logs screen.

 

TIA,

John

1 Accepted Solution

Accepted Solutions

chyps
Level 1
Level 1

Cannot fetch those details using ERS API which accesses the ISE endpoint DB from PAN/PSN nodes, but can fetch active session details using Monitoring REST API from MNT node.  Other ways to fetch, albeit not API, is the Get All Endpoints dump from PAN CLI (app config ise), or the Endpoint Analysis Tool.

 

/Craig

View solution in original post

2 Replies 2

chyps
Level 1
Level 1

Cannot fetch those details using ERS API which accesses the ISE endpoint DB from PAN/PSN nodes, but can fetch active session details using Monitoring REST API from MNT node.  Other ways to fetch, albeit not API, is the Get All Endpoints dump from PAN CLI (app config ise), or the Endpoint Analysis Tool.

 

/Craig

Thanks.  Looks like I can get at least most of the info I was after with the Monitoring REST APIs.

-John