mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-12 06:04:56 +03:00
mukul975
c21af3347e
- Add scripts/agent.py and references/api-reference.md to all remaining skills - Update all 648 LICENSE files: copyright now reads 'Mahipal' - Add implementing-security-monitoring-with-datadog (new skill with full anatomy) - All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md
52 lines
1.6 KiB
Markdown
52 lines
1.6 KiB
Markdown
# API Reference: Implementing Network Access Control with Cisco ISE
|
|
|
|
## Cisco ISE ERS API
|
|
|
|
```python
|
|
import requests
|
|
resp = requests.get("https://ISE:9060/ers/config/authorizationprofile",
|
|
auth=("admin", "password"),
|
|
headers={"Accept": "application/json"}, verify=False)
|
|
```
|
|
|
|
## Key ERS Endpoints
|
|
|
|
| Endpoint | Description |
|
|
|----------|-------------|
|
|
| `/ers/config/authorizationprofile` | Authorization profiles |
|
|
| `/ers/config/networkdevice` | Network devices |
|
|
| `/ers/config/endpointgroup` | Endpoint groups |
|
|
| `/ers/config/identitygroup` | Identity groups |
|
|
| `/ers/config/internaluser` | Internal users |
|
|
|
|
## ISE Policy Components
|
|
|
|
| Component | Description |
|
|
|-----------|-------------|
|
|
| Authentication Policy | Protocol selection (EAP-TLS, PEAP) |
|
|
| Authorization Policy | Access decisions (permit, deny, quarantine) |
|
|
| Profiling Policy | Endpoint classification |
|
|
| Posture Policy | Compliance checks (AV, patch level) |
|
|
|
|
## 802.1X Authentication Methods
|
|
|
|
| Method | Security Level | Use Case |
|
|
|--------|---------------|----------|
|
|
| EAP-TLS | Highest | Certificate-based corporate |
|
|
| PEAP-MSCHAPv2 | High | Username/password |
|
|
| MAB | Low | Non-supplicant devices |
|
|
|
|
## RADIUS Attributes
|
|
|
|
| Attribute | Description |
|
|
|-----------|-------------|
|
|
| Calling-Station-Id | Client MAC address |
|
|
| NAS-IP-Address | Switch/AP IP |
|
|
| Tunnel-Type | VLAN assignment |
|
|
| Filter-Id | ACL name |
|
|
|
|
### References
|
|
|
|
- Cisco ISE API: https://developer.cisco.com/docs/identity-services-engine/
|
|
- ISE Admin Guide: https://www.cisco.com/c/en/us/td/docs/security/ise/
|