ISE Hardware Refresh: Assessment

# Complete refresh planning report - version, patches, nodes, certs, license, backup
netapi ise get-nodes --refresh

# Full report as JSON
netapi ise -f json get-nodes --refresh | jq '.'

# Extract version only
netapi ise -f json get-nodes --refresh | jq '.version'

# All certificate expiration dates
netapi ise -f json get-nodes --refresh | jq '.certificates | to_entries[] | .value[] | {name, expiration_date}'

# Filter certs by name - jq regex: test("pattern"; "i") for case-insensitive
netapi ise -f json get-nodes --refresh | jq '.certificates[][] | select(.name | test("EAP"; "i"))'

# License tier summary
netapi ise -f json get-nodes --refresh | jq '.license_tiers[] | "\(.name): \(.compliance) (\(.endpoints) endpoints)"'

# Nodes with status
netapi ise -f json get-nodes --refresh | jq '.nodes[] | "\(.hostname) [\(.status)] - \(.roles | join(", "))"'

# Check if any cert expires within 365 days (requires date parsing)
netapi ise -f json get-nodes --refresh | jq '.certificates[][] | .name'

# License consumption, endpoint count, deployment scale
netapi ise get-nodes --capacity

# Certificate expiry with days remaining and warnings
netapi ise get-nodes --certs

# Node details - hostname, IP, roles, services, status
netapi ise get-nodes --detailed

# Active sessions (current load)
netapi ise mnt sessions | wc -l

# Endpoint identity groups
netapi ise get-endpoint-groups

# Authorization profiles (policy complexity)
netapi ise get-authz-profiles

# SSH to ISE (uses admin user, password auth)
ssh ise-01   # or ssh ise-02

# Once connected, run these commands:
show version              # Software version, build date, patches
show inventory            # Hardware: PID, serial, CPU, RAM, disk
show udi                  # Quick: PID and serial only
show disk                 # Disk usage details
show application status ise  # Service status

NAME: "ISE-VM-K9    chassis", DESCR: "ISE-VM-K9     chassis"
PID: ISE-VM-K9,  VID: V01,   SN: HFOPKI3IA94

Manufacturer: Red Hat
Product Name: KVM
Total RAM Memory: 16138384 kB
CPU Core Count: 8
CPU 0: Model Info: Intel(R) Xeon(R) D-2146NT CPU @ 2.30GHz
Hard Disk Count(*): 1
Disk 0: Capacity: 300GiB

# Peak authentication rate (check MNT logs)
netapi ise mnt auth-list --hours 24 | wc -l

# Failed authentications (may indicate capacity issues)
netapi ise mnt failures --hours 24 | wc -l