Cisco

The Cisco connector allows you to connect to Cisco ISE (Identity Services Engine) to retrieve network equipment inventory, authentication policies and security configurations.

Objective

The Cisco connector allows you to retrieve the following information:

• Network device inventory and endpoints
• Authentication and access policies
• Security event logs and audit trails

Prerequisites

• Access to Cisco ISE with administrator rights
• ERS (External RESTful Services) API enabled
• API user account configured with appropriate permissions

Authentication

This connector uses Basic Authentication or ERS (External RESTful Services) API with API credentials.

Procedure

Enable ERS API (ISE)

1. Log in to Cisco ISE with administrator rights.
2. Go to Administration > System > Settings.
3. Locate the ERS (External RESTful Services) section.
4. Enable the Enable ERS for Read/Write checkbox.
5. Click Save.

Configure API Authentication

1. Create an ERS API user account in ISE:
   • Go to Administration > Users.
   • Create a new user with ERS API permissions.
   • Store the username and password securely.
2. For Basic Auth:
   • Use the ERS API user credentials (username/password).

Configure in OverSOC

1. In OverSOC, go to Data Sources Settings > Sources.
2. Select Cisco and click Configure.
3. Enter the Cisco ISE server URL.
4. Configure authentication:
   • For Basic Auth: enter username and password
   • For ERS API: use the configured credentials
5. Click Save Configuration.

Official Documentation

For more information, see the Cisco ISE ERS API Authentication Documentation