About Difan_Zhao

Difan_Zhao · 02-23-2023

Need some advice. We use ISE for authentication for the Cisco anyconnect VPN. The default authentication is to use a Identity store that uses Windows AD for authentication. I want to add an authentication policy based on the client IP address so if t...

Difan_Zhao · 01-27-2023

I have got another problem I am trying to solve... When I use this URL to get the access rules for a policy, it gets the rules for its parent as well... “/api/fmc_config/v1/domain/{domain_id}/policy/accesspolicies/{accesspolicy_id}/accessrules?limit=...

Difan_Zhao · 01-27-2023

Hi team,I am trying to assign a parent or base policy for a newly created access policy with the FMC API. I used the PUT method. My URL is '/api/fmc_config/v1/domain/abb07252-1ece-43d2-d526-000000000002/policy/accesspolicies/90E2BAC8-8AE5-0ed3-0001-8...

Difan_Zhao · 01-17-2023

Hi team,I am using the API to create an access policy with the following URL with the POST action. {{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/policy/accesspolicies The data (body in the POST) is like this. The prefilter poli...

Difan_Zhao · 01-11-2023

Hi experts, I am wondering if I can GET multiple network objects in one API call to the FMC. I found the following URL for querying one network object (from the postman collection){{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/obj...

Difan_Zhao · 02-24-2023

The tunnel-endpoint one didn't work... reviewed the radius log and it doesn't match my connection. the calling station ID one works fine though. I think I will stick to that. Thanks!

Difan_Zhao · 02-24-2023

Thanks Hollifield. I will give it a try today and let you know how it goes. I guess we could create an AD account for that. I might be just too lazy to engage the AD team for that haha... This is for a probe to monitor the webtop. I have created a st...

Difan_Zhao · 01-30-2023

Thank you so much, Marius! I am so glad that you could reproduce the issue. You are absolutely right that I forgot to mention that I tried with the GUI and it worked fine so it must be supported but just some small pieces I missed. Please keep me pos...

Difan_Zhao · 01-30-2023

Hi Marius, thanks for reading carefully with my messages...90E2BAC8-8AE5-0ed3-0001-851131830796 -> The new policy (or the child policy)90E2BAC8-8AE5-0ed3-0000-292058203644 -> The parent policy (aka the base policy)abb07252-1ece-43d2-d526-000000000002...

Difan_Zhao · 01-28-2023

Thanks Marius for your response.. I am still getting the same result.. So I followed your instruction. I first "GET" the response from the URL'https://fmc.network.lan/api/fmc_config/v1/domain/abb07252-1ece-43d2-d526-000000000002/policy/accesspolicies...

Member Since	‎06-19-2021 11:44 AM
Date Last Visited	‎03-17-2023 06:19 PM
Posts	39
Total Helpful Votes Received	21

User Statistics

User Activity

ISE authentication based on the client IP

How to often fetch the access rules for a child policy with FMC API

How to assign a parent/base policy to an access policy with FMC API

FMC API - can not associate a prefilter policy to an access policy

FMC - How to get multiple objects with the rest API?

Re: ISE authentication based on the client IP

Re: ISE authentication based on the client IP

Re: How to assign a parent/base policy to an access policy with FMC AP

Re: How to assign a parent/base policy to an access policy with FMC AP

Re: How to assign a parent/base policy to an access policy with FMC AP