@thomas Thanks for the suggestions. I have studied APIs you referenced, but have some confusions:1) Does Endpoint Group with name "BLACKLIST" exists by default in ISE? If no, creating a endpoint group with name "BLACKLIST" is suffice? I mean there is...