Cisco
Collect Cisco ISE
Prepare ERS and OpenAPI access on the Primary Administration Node.
Prepare ISE API access
Open API settings
Open Administration > System > Settings > API Settings (release-dependent).
Enable the required read services
Enable the required ERS/API Service Settings and OpenAPI reads.
Create the API account
Assign External RESTful Services Operator for ERS GET access; verify OpenAPI policy-read permissions separately.
Check the node
Use the reachable Primary Administration Node and selected ERS port.
Configure the collector
| Field | Value |
|---|---|
| Source | Cisco ISE |
| Address | Primary Administration Node hostname/IP |
| Method | ERS and OpenAPI (HTTPS) |
| ERS port | 443 for current supported releases, or 9060 for the legacy ERS endpoint |
| Account | Dedicated API reader |
| Workspace token | Active ConfigProof cpc_ token |
Collect
Confirm the node and credentials
Enter the node, API reader and workspace token. For configured client-certificate authentication, supply the certificate/key files requested.
Collect and review coverage
Continue and collect; check API permission and coverage warnings.
API coverage
ERS and OpenAPI availability are independent. Missing policy sets may indicate unavailable APIs or permissions; check collection warnings.