Cisco Cisco

Import your network equipment inventory and security policies from Cisco

The Cisco connector allows you to connect to Cisco ISE (Identity Services Engine) to retrieve network equipment inventory, authentication policies and security configurations.

Objective

The Cisco connector allows you to retrieve the following information:

  • Network device inventory and endpoints
  • Authentication and access policies
  • Security event logs and audit trails

Prerequisites

  • Access to Cisco ISE with administrator rights
  • ERS (External RESTful Services) API enabled
  • API user account configured with appropriate permissions

Authentication

This connector uses Basic Authentication or ERS (External RESTful Services) API with API credentials.

Procedure

Enable ERS API (ISE)

  1. Log in to Cisco ISE with administrator rights.
  2. Go to Administration > System > Settings.
  3. Locate the ERS (External RESTful Services) section.
  4. Enable the Enable ERS for Read/Write checkbox.
  5. Click Save.

Configure API Authentication

  1. Create an ERS API user account in ISE:
    • Go to Administration > Users.
    • Create a new user with ERS API permissions.
    • Store the username and password securely.
  2. For Basic Auth:
    • Use the ERS API user credentials (username/password).

Configure in OverView

  1. In OverView, go to Data Sources Settings > Sources.
  2. Select Cisco and click Configure.
  3. Enter the Cisco ISE server URL.
  4. Configure authentication:
    • For Basic Auth: enter username and password
    • For ERS API: use the configured credentials
  5. Click Save Configuration.
Alternative: file import through DropPoint

The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Cisco.

Where do the files go?

Bucket : s3://cisco/

Example : s3://cisco/export.csv

The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.

Official Documentation

For more information, see the Cisco ISE ERS API Authentication Documentation

← PreviousArubaNext →FortiNAC