MDM

Service: com.cisco.ise.mdm

This is Mobile Device Management (MDM) service. This is available in ISE 2.4

Service properties

Name	Description	Example
restBaseUrl		https://[ise-host1]:8910/pxgrid/ise/mdm
wsPubsubService		com.cisco.ise.pubsub
endpointTopic		/topic/com.cisco.ise.mdm.endpoint
restBaseURL	Deprecated This is deprecated from ISE 2.3 and will be removed in the future. Please use restBaseUrl, camelcase even for acronyms	https://[ise-host1]:8910/pxgrid/mdm/bd

---

Authorization rules

still under construction...

Service	Operation	Description
com.cisco.ise.mdm	gets	All get operations
com.cisco.ise.pubsub	publish /topic/com.cisco.ise.mdm
com.cisco.ise.pubsub	subscribe /topic/com.cisco.ise.mdm

---

HTTP APIs

POST [restBaseUrl]/getEndpoints

This is used to get endpoints. An optional filter can be used in which entries matching the attributes specified will be returned.

If no filter is used, an empty json structure must be sent as the request. If no policy is found, endpoints will have an empty array.

Request

{
  "filter": endpoint object (optional)
}

Reponse

{
  "endpoints": [
    array of endpoint object      
  ]
}

---

POST [restBaseUrl]/getEndpointByMacAddress

If not found, HTTP status "204 No content" will be returned.

Request

{
  "macAddress": string (required)
}

Reponse

{
  endpoint object      
}

---

POST [restBaseUrl]/getEndpointsByType

This is used to get endpoints by type, either non-compliant, registered or disconnected endpoints.

If no policy is found, endpoints will have an empty array.

Request

{
  "type": endpoint type (required. values: NON_COMPLIANT, REGISTERED, DISCONNECTED)
}

Reponse

{
  "endpoints": [
    array of endpoint object      
  ]
}

---

POST [restBaseUrl]/getEndpointsByOsType

This is used to get endpoints by OS type, either ANDROID, IOS or WINDOWS.

If no policy is found, endpoints will have an empty array.

Request

{
  "osType": OS type (required. values: ANDROID, IOS or WINDOWS)
}

Reponse

{
  "endpoints": [
    array of endpoint object      
  ]
}

---

WS STOMP messaging

endpointTopic

{
  endpoint object
}

---

Objects

"endpoint" object

Name	Type	Description	ISE version
macAddress	string		2.4
osVersion	string		2.4
registered	boolean		2.4
compliant	boolean		2.4
diskEncrypted	boolean		2.4
jailBroken	boolean		2.4
pinLocked	boolean		2.4
model	string		2.4
manufacturer	string		2.4
imei	string		2.4
meid	string		2.4
udid	string		2.4
serialNumber	string		2.4
location	string		2.4
deviceManager	string		2.4
lastSyncTime	Datetime		2.4

Samples

{
	"endpoints": [{
		"macAddress": "F8:27:93:C7:4E:9F",
		"registered": false,
		"compliant": false,
		"diskEncrypted": false,
		"jailBroken": false,
		"pinLocked": false,
		"deviceManager": "sns"
	}]
}