category: Network Security provider: Cisco Systems commonfields: id: Cisco ISE version: -1 configuration: - display: Cisco ISE server URL (e.g., https://123.123.123.65) name: serverURL required: true type: 0 - display: Server port (e.g., 9060) name: serverPort type: 0 required: false defaultvalue: '9060' - display: Cisco ISE username name: credentials required: true type: 9 - display: Use system proxy settings name: proxy type: 8 required: false - display: Trust any certificate (not secure) name: insecure type: 8 required: false description: Next-generation secure network access. display: Cisco ISE name: Cisco ISE script: commands: - arguments: - description: 'MAC address of the endpoint (format: 11:22:33:44:55:66).' name: macAddress required: true description: Returns an endpoint ID, by its MAC address. name: cisco-ise-get-endpoint-id outputs: - contextPath: Endpoint.ID description: Endpoint ID. type: string - contextPath: Endpoint.MACAddress description: Endpoint MAC address. type: string - arguments: - description: The ID of the endpoint for which to return details. name: endpointID - description: MAC address of the endpoint (format 11:22:33:44:55:66). name: macAddress description: Returns details for a specified endpoint. name: cisco-ise-get-endpoint-details outputs: - contextPath: CiscoISE.Endpoint.ID description: Endpoint ID. type: string - contextPath: CiscoISE.Endpoint.Description description: Endpoint description. type: string - contextPath: CiscoISE.Endpoint.MACAddress description: Endpoint MAC address. type: string - contextPath: CiscoISE.Endpoint.Group description: Endpoint group name. type: string - contextPath: Endpoint.ID description: Endpoint ID. type: string - contextPath: Endpoint.MACAddress description: Endpoint MAC address. type: string - contextPath: CiscoISE.Endpoint.CustomAttributes description: Endpoint custom attributes. type: string - contextPath: CiscoISE.Endpoint.StaticGroupAssignment description: True if the endpoint has static group assignment. type: boolean - contextPath: CiscoISE.Endpoint.StaticProfileAssignment description: Whether the endpoint has a static profile assignment. type: boolean - contextPath: CiscoISE.Endpoint.User description: Profile of the user associated with the endpoint. type: string - arguments: - description: MAC address of the endpoint (format 11:22:33:44:55:66). name: macAddress required: true description: Re-authenticates an endpoint (Change of Authorization - CoA). name: cisco-ise-reauthenticate-endpoint outputs: - contextPath: CiscoISE.Endpoint.MACAddress description: MAC address of the endpoint. type: string - contextPath: CiscoISE.Endpoint.reauthenticateResult description: Re-authentication result. type: boolean - description: Returns data for existing endpoints. name: cisco-ise-get-endpoints outputs: - contextPath: Endpoint.ID description: Endpoint ID. type: string - contextPath: Endpoint.MACAddress description: Endpoint MAC address. type: string - contextPath: CiscoISE.Endpoint.ID description: Endpoint ID. type: string - contextPath: CiscoISE.Endpoint.MACAddress description: Endpoint MAC address. type: string - arguments: - description: Endpoint ID. name: id - description: MAC address of the endpoint (format 11:22:33:44:55:66). name: macAddress - description: A CSV list of attributes, for example, "attributeName=firstAttribute,secondAttribute". name: attributeName required: true - description: A CSV list of attribute values, for example, "attributeValue=firstValue,secondValue". name: attributeValue required: true description: Updates the custom attributes of an endpoint. name: cisco-ise-update-endpoint-custom-attribute - arguments: - description: The group ID to assign to this endpoint, e.g., 1. name: groupId - description: MAC address of the endpoint (format 11:22:33:44:55:66). name: macAddress - description: Endpoint ID of the endpoint to update. name: id - description: Name of the group to update for the endpoint. name: groupName description: Updates the group of an endpoint. name: cisco-ise-update-endpoint-group - description: Retrieves a collection of endpoint identity groups. name: cisco-ise-get-groups outputs: - contextPath: CiscoISE.Group.Description description: The description of the endpoint identity groups. type: String - contextPath: CiscoISE.Group.ID description: The ID of the endpoint identity groups. type: String - contextPath: CiscoISE.Group.Name description: The name of the endpoint identity groups. type: String - description: Returns all Adaptive Network Control policies. name: cisco-ise-get-policies outputs: - contextPath: CiscoISE.Policy.Description description: The description of the ANC policy. type: String - contextPath: CiscoISE.Policy.ID description: The ID of the ANC policy. type: String - contextPath: CiscoISE.Policy.Name description: The name of the ANC policy. type: String - arguments: - description: The name of the ANC policy to return. name: policy_name description: Returns a single Adaptive Network Control policy. name: cisco-ise-get-policy outputs: - contextPath: CiscoISE.Policy.Action description: The action of the policy. Can be "QUARANTINE", "PORTBOUNCE", or "SHUTDOWN". type: String - contextPath: CiscoISE.Policy.ID description: The ID of the ANC policy. type: String - contextPath: CiscoISE.Policy.Link description: The link for the ANC policy (GUI). type: String - contextPath: CiscoISE.Policy.Name description: The name of the ANC policy. type: String - arguments: - auto: PREDEFINED description: The actions of the policy. Can be "QUARANTINE", "PORTBOUNCE", or "SHUTDOWN". name: policy_actions predefined: - QUARANTINE - PORTBOUNCE - SHUTDOWN required: true - description: The name of the new adaptive network control policy. name: policy_name required: true description: Creates an Adapative Network Control policy. name: cisco-ise-create-policy outputs: - contextPath: CiscoISE.Policy.Action description: The actions of the ANC policy. type: String - contextPath: CiscoISE.Policy.Name description: The name of the new ANC policy. type: String - arguments: - description: 'The MAC address to which to apply the policy. ' name: mac_address required: true - description: The name of the policy to assign to the endpoint. name: policy_name required: true description: Assigns an Adapative Network Control policy to an endpoint. name: cisco-ise-assign-policy outputs: - contextPath: CiscoISE.Endpoint.MACAddress description: The MAC address of the endpoint. type: String - contextPath: CiscoISE.Endpoint.PolicyName description: The policy name that was applied to the endpoint. type: String - description: Returns all block listed endpoints. name: cisco-ise-get-blacklist-endpoints outputs: - contextPath: CiscoISE.Endpoint.ID description: The endpoint ID. type: String - contextPath: CiscoISE.Endpoint.Name description: The name of the endpoint. type: String - contextPath: CiscoISE.Endpoint.Description description: The endpoint description. type: String - contextPath: CiscoISE.Endpoint.Link description: The link for the endpoint. type: String - arguments: - description: 'MAC address of the endpoint (format: 11:22:33:44:55:66).' name: mac_address required: true - description: 'A list of custom attributes.' name: attributes_map description: Creates a new endpoint on Cisco ISE according to the passed MAC address and custom attribute list. name: cisco-ise-create-endpoint outputs: - contextPath: CiscoISE.Endpoint.MACAddress description: MAC address of the new endpoint. type: string - description: Returns data for all Cisco ISE nodes in the deployment. name: cisco-ise-get-nodes outputs: - contextPath: CiscoISE.NodesData description: Details of all deployment ISE nodes. type: unknown - arguments: - description: 'MAC address of the endpoint (format: 11:22:33:44:55:66).' name: mac_address required: true description: Returns an EndpointID using its name (Available on ISE 2.3 and later versions). name: cisco-ise-get-endpoint-id-by-name outputs: - contextPath: Endpoint.ID description: Endpoint ID. type: string - contextPath: Endpoint.MACAddress description: Endpoint MAC address. type: string - arguments: - description: The MAC address from which to remove the policy. name: mac_address required: true - description: The name of the policy to remove from the endpoint. name: policy_name required: true description: Removes an Adapative Network Control policy from an endpoint. name: cisco-ise-remove-policy outputs: - contextPath: CiscoISE.Endpoint.MACAddress description: The MAC address of the endpoint. type: string - contextPath: CiscoISE.Endpoint.PolicyName description: The policy name that was removed from the endpoint. type: string - arguments: - description: IP address to query in the ISE platform. name: ip_address required: true description: Queries an IP address and returns its session data from an active endpoint. name: cisco-ise-get-session-data-by-ip dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' type: python subtype: python3 tests: - cisco-ise-test-playbook fromversion: 5.0.0