Using ERS API to pull authc and authz policy details

[johnlhawley]

How would I go about pulling policy information through the ERS API's? 

I've got a working python script that I have successfully pulled the EndPoint profile by searching with the Endpoint ID MAC address:

https://<ise admin fqdn>:9060/ers/config/endpoint/?filter=mac.EQ.d4:be:d9:80:79:4b

From there I can find dig out the profileid and use that to look up end point profile

https://<ise admin fqdn>:9060/ers/config/profilerprofile/4408bf10-222f-11e6-99ab-005056bf55e0

I've been searching through the ERS SDK docs, but can't find any relevant info for looking up other info such as is seen on the ISE Admin portal when looking at the Operations/Radius/Live Logs screen.

TIA,

John

[chyps · Accepted solution]

Cannot fetch those details using ERS API which accesses the ISE endpoint DB from PAN/PSN nodes, but can fetch active session details using Monitoring REST API from MNT node.  Other ways to fetch, albeit not API, is the Get All Endpoints dump from PAN CLI (app config ise), or the Endpoint Analysis Tool.

/Craig

[johnlhawley]

Thanks.  Looks like I can get at least most of the info I was after with the Monitoring REST APIs.

-John