Cisco ISE Advanced Settings

Advanced Settings - Cisco ISE

1. Fetch Internal Users - Select this option to fetch internal users.

2. Fetch Guest Users - Select this option to fetch guest users.

3. Fetch Admin Users - Select this option to fetch admin users.

4. Fetch endpoints (through ERS) - Select this option to fetch data from the ISE endpoint through the ERS endpoint API.

5. Enrich Endpoints with Authentication Status and Session Parameters - Select this option to add authentication status data for each fetched endpoint. This will also fetch and enrich endpoint devices with session parameters (See examples from ISE Monitoring API), which will allow to populate the Last Seen field, for example.

6. Enrich Endpoints with Policy Name - Select this option to enrich endpoint devices with the policy name.

7. Fail client on pxGrid connection error (default: true) - Select to propagate errors originating from the pxGrid connection when Use pxGrid to fetch live sessions is enabled for a client. When this is not set, errors are propagated only when there are errors from both pxGrid and ERS connectivity to a client.

   📘

   Note

   When configuring the Cisco ISE and you do not want to use the pxGrid fetch to retrieve the data, enable Fetch endpoints.

8. Skip devices without IP address - Select this option to not fetch devices that do not have an IP address.

9. Fetch Certificates - Select this option to fetch certificates.

10. Parse FismaID - Select this option to parse FismaID from selected Authorization Profiles.

11. Enable Custom Parsing - Enable this option to define how to parse specific fields from the raw data fetched. You can choose to parse the data into an already existing field, or create a new one. This adapter supports User Custom Parsing/ Device Custom Parsing. See Adapter Custom Parsing for more information.

12. Only include devices that have a name OR an IP address - Select this option to only fetch devices that have either an asset name or an IP address.

13. Only include devices that have a name AND an IP address - Select this option to only fetch devices that have both an asset name and an IP address.

    💡

    Important

    If a Cisco ISE connection has 'Fetch endpoints' enabled and at the same time has 'Skip devices without IP address' or 'Only include devices that have a name AND an IP address' enabled, then the endpoints data will not be ingested, because endpoints don’t have IP address data.