mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-18 21:49:40 +03:00
Complete folder anatomy for all 649 cybersecurity skills + update LICENSE to Mahipal
- Add scripts/agent.py and references/api-reference.md to all remaining skills - Update all 648 LICENSE files: copyright now reads 'Mahipal' - Add implementing-security-monitoring-with-datadog (new skill with full anatomy) - All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md
This commit is contained in:
@@ -0,0 +1,51 @@
|
||||
# API Reference: Implementing Network Access Control with Cisco ISE
|
||||
|
||||
## Cisco ISE ERS API
|
||||
|
||||
```python
|
||||
import requests
|
||||
resp = requests.get("https://ISE:9060/ers/config/authorizationprofile",
|
||||
auth=("admin", "password"),
|
||||
headers={"Accept": "application/json"}, verify=False)
|
||||
```
|
||||
|
||||
## Key ERS Endpoints
|
||||
|
||||
| Endpoint | Description |
|
||||
|----------|-------------|
|
||||
| `/ers/config/authorizationprofile` | Authorization profiles |
|
||||
| `/ers/config/networkdevice` | Network devices |
|
||||
| `/ers/config/endpointgroup` | Endpoint groups |
|
||||
| `/ers/config/identitygroup` | Identity groups |
|
||||
| `/ers/config/internaluser` | Internal users |
|
||||
|
||||
## ISE Policy Components
|
||||
|
||||
| Component | Description |
|
||||
|-----------|-------------|
|
||||
| Authentication Policy | Protocol selection (EAP-TLS, PEAP) |
|
||||
| Authorization Policy | Access decisions (permit, deny, quarantine) |
|
||||
| Profiling Policy | Endpoint classification |
|
||||
| Posture Policy | Compliance checks (AV, patch level) |
|
||||
|
||||
## 802.1X Authentication Methods
|
||||
|
||||
| Method | Security Level | Use Case |
|
||||
|--------|---------------|----------|
|
||||
| EAP-TLS | Highest | Certificate-based corporate |
|
||||
| PEAP-MSCHAPv2 | High | Username/password |
|
||||
| MAB | Low | Non-supplicant devices |
|
||||
|
||||
## RADIUS Attributes
|
||||
|
||||
| Attribute | Description |
|
||||
|-----------|-------------|
|
||||
| Calling-Station-Id | Client MAC address |
|
||||
| NAS-IP-Address | Switch/AP IP |
|
||||
| Tunnel-Type | VLAN assignment |
|
||||
| Filter-Id | ACL name |
|
||||
|
||||
### References
|
||||
|
||||
- Cisco ISE API: https://developer.cisco.com/docs/identity-services-engine/
|
||||
- ISE Admin Guide: https://www.cisco.com/c/en/us/td/docs/security/ise/
|
||||
Reference in New Issue
Block a user