ISE Assistant

This extension aims to improve on some of the slow operational tasks that commonly need to be performed in Cisco Identity Services Engine (ISE) deployment.

In this early version, it helps to quickly move endpoints to new endpoint identity groups.

Commonly, when managing a Cisco ISE deployment, I found myself staring at lines of events in the RADIUS Live Logs. I'd see an endpoint authentication come along that simply needed to be added to a particular endpoint identity group in order to successfully authenticate. Unfortunately, actually doing that simple task was quite burdensome in the ISE web interface. You would need to copy the MAC address, go to the Endpoint database (or Context Visibility), filter by the MAC address, open the endpoint, click edit, check "Static Group Assignment" and select the group you wanted to put it in. Generally speaking, this took a couple of minutes per endpoint. You could get faster by keeping a couple tabs open, and getting a good rhythm, but it just isn't efficient.

For the love of god, I just wanted to be able to right click on a MAC address and say "add to identity group XYZ"! Well, this extension does just that. You highlight a MAC address, right click to present a list of Endpoint Identity Groups, and select the one you want. It fires off some API calls and it's done! You get a nice little notification stating as much after it's done! You can even highlight any number of addresses at once and it will handle them in bulk using the same number of clicks! Any selected text that is highlighted that is not a MAC address (in any of the common formats) will be ignored.

Eventually, I'd like to add more functionality to this extension, but, as of now, this is the initial need and only feature. Please enjoy and let me know if this extension is a huge help for you or your team, or if I can add anything to it to help you out!