Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a python app using ISE pxGrid interface. It used to work fine a while ago, but something changed.
Now I cannot do the Service Lookup, after sending the following:
url=https://10.1.41.70:8910/pxgrid/control/ServiceLookuprequest={"name": "co...
When scripting to ISE pxGrid interface I find that
- if I use the /getSessions API point I retrieve all the sessions
- if I use the a loop, trying to get sessions for specific mac addresses using the /getSessionsByMacAddress, somethimes I get a statu...
When querying the pxGrid sessions interface I get quite a few more entries than I do from the ISE GUI interface (Live sessions).
Upon investigation, it shows that the sessions which also appear in ISE GUI interface are in state STARTED or POSTURE, wh...
HiISE posture module fails to install on one Windows 7 because of "File Integrity Check Error".Installation is from ISE headend.I have verified the SHA512 with that on CCO, and they are the same.The other modules (AnyConnect VPN and NVM) install ok.6...
Can I have a pointer to IOS XE (Denali and later) configuration examples/guides for ISE integration?Quite a few things has changed like IP device tracking config, debug RADIUS not working etc.I found the ISE GOLD training example conf in the Bootstra...
Thanks. I am sure I can remove the stale sessions as per your suggestion.
But is there meaning of the state anywhere documented?
My guess is that the session gets AUTHENTICATED, then to STARTED after accounting start, then back to AUTHENTICATED after...
Thanks Craig,I have read those documents, but I find them still out of date with the latest post-Denali releases of IOS.Just some examples -ip device tracking has disappeared completely from switch CLI, …. some release docs say it is turned on automa...
Hi HsingThis is the same thing - but only almost.For the customer it works for the first authz - putting it into “Not-Compliant Posture” state.It is the with the CoA (after posture compliance) where the internal dACL does not work!Would you say it is...
Sorry need to follow up.Customer runs ISE 2.0 and in that release there is no ANC visible through the ISE GUI.But I know we still had the old quarantinebyIP working in that release however undocumented.Does the customer have t upgrade from ISE 2.0 to...
