Mist Sites Clients - NAC API is one of 212 APIs that Mist publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Sites Clients - NAC. The published artifact set on APIs.io includes an OpenAPI specification.
This API exposes
5 operations
across 5 paths,
and defines 74 schemas.
It is described by OpenAPI 3.2.0, at version 2606.1.1.
Requests are made against 12 base URLs: https://api.mist.com, https://api.gc1.mist.com, https://api.ac2.mist.com, https://api.gc2.mist.com, https://api.gc4.mist.com, https://api.eu.mist.com, https://api.gc3.mist.com, https://api.ac6.mist.com, https://api.gc6.mist.com, https://api.ac5.mist.com, https://api.gc5.mist.com, https://api.gc7.mist.com.
The identity and technical contract details declared by the specification.
nac_client_events
array
List of NAC authentication events
random_mac
string
Whether the client is using randomized MAC address or not. enum: true, false
org_id
string
Unique identifier of a Mist organization
last_nacrule_id
string
ID of the latest NAC Rule used to authenticate the client
nac_event_nacrule_id
string
NAC Policy Rule ID, if matched
nac_nas_vendor
array
Vendor name of the NAS for the specified duration
response_client_nac_search_results
array
NAC client records returned by a search response
last_username
string
If dot1x authentication, the username used during the latest authentication. Otherwise, the MAC address of the client
nac_client_event_usermac_labels
array
Labels derived from usermac entry
nac_event_dryrun_nacrule_id
string
NAC Policy Dry Run Rule ID, if present and matched
strings
array
Unique string values returned or accepted by this schema
last_ap
string
Latest AP where the client is/was connected to
count_results
array
List of count result rows
last_cert_serial
string
When certificate based authentication is used, the Serial from the latest certificate used
edr_status
string
EDR Status of the NAC client. enum: sentinelonehealthy, sentineloneinfected, crowdstrikelow, crowdstrikemedium, crowdstrikehigh, crowdstrikecritical, crowdstri…
nac_client_ip
array
The known IP addresses used by the client for the specified duration
nac_ssid
array
SSIDs the client was connected to for the specified duration
nac_cert_subject
array
When certificate based authentication is used, the Subject from the certificates used for the specified duration
site_nac_client_events_count_distinct
string
enum: ap, authtype, dryrunnacruleid, mac, nacruleid, nasvendor, ssid, type, username, vlan
site_nac_clients_count_distinct
string
enum: ap, authtype, devicemac, edrmanaged, edrprovider, edrstatus, family, hostname, idpid, mfg, mdmcompliance, mdmmanaged, mdmprovider, model, mxedgeid, nacru…
response_http403
object
Standard HTTP 403 permission error response
1 property
nac_client_event_idp_role
array
Identity provider roles or groups returned for a NAC client event
last_port_id
string
If Wired authentication, the latest Port-id the client was connected to
nac_event_idp_id
string
If IDP is used, the id of the IDP configuration used
device_type
string
enum: ap, gateway, switch
response_client_nac_search
object
Paginated NAC client search response
6 properties
nac_auth_type
string
enum: cert, device-auth, eap-teap, eap-tls, eap-ttls, idp, mab, eap-peap
nac_client_event
object
NAC authentication event for a wired or wireless client
28 properties
nac_port_id
array
Port-ids the client was connected to for the specified duration
nac_client_vlan
array
List of vlans that have been assigned to the client
last_nas_vendor
string
Vendor name of the NAS for the latest authentication
nac_event_vlan
string
vlan that assigned to the client
nac_event_nacrule_matched
boolean
NAC Policy Rule Matched
response_events_nac_client_search
object
Paginated response for NAC client event search results
6 properties
nac_event_type
string
Event type, e.g. NACCLIENTPERMIT. Use the [List NAC Events Definitions](/operations/listNacEventsDefinitions) endpoint to get the full list of available values.
response_count
object
Distinct count response for time-bounded search results
6 properties
6 required
nac_client_coa_response
object
Response returned after sending a NAC client CoA command
2 properties
last_vlan
integer
Latest VLAN ID assigned to the client
last_nacrule_name
string
Name of the latest NAC Rule used to authenticate the client
nac_access_type
string
Type of network access. enum: wireless, wired, vty
timestamp
number
Epoch timestamp, in seconds
response_http401
object
Standard HTTP 401 authentication error response
1 property
response_http429
object
Standard HTTP 429 rate limit error response
1 property
nac_event_nas_vendor
string
Vendor name of the NAS
nac_client_ap
array
AP MAC addresses observed for the NAC client during the selected time range
nac_event_dryrun_nacrule_matched
boolean
true if dryrun rule present and matched with priority, false if not matched or not present
last_cert_expiry
number
When certificate based authentication is used, the expiration date from the latest certificate used
nac_nacrule_id
array
IDs of the NAC Rules used to authenticate the client for the specified duration
nac_client_coa
object
Change of Authorization request for a NAC client
1 property
nac_device_mac
string
MAC address of the AP or switch the client is connected to
last_client_ip
string
The last known IP address for the client
nac_event_port_id
string
Port ID where the NAC client event occurred
response_http400
object
Standard HTTP 400 bad request error response
1 property
last_cert_cn
string
When certificate based authentication is used, the CN from the latest certificate used
nac_client_username
array
List of usernames that have been assigned to the client
nac_event_username
string
username assigned to the client
last_cert_issuer
string
When certificate based authentication is used, the Issuer from the latest certificate used
nac_cert_issuer
array
When certificate based authentication is used, the Issuer from the certificates used for the specified duration
nac_coa_type
string
CoA type to send. enum: reauth, disconnect
resp_attrs
array
List of RADIUS AVP returned by the Authentication Server
nac_client_mac
string
Client MAC address observed in the NAC event
count_result
object
Count result row with the matching distinct field values
1 property
1 required
last_ssid
string
If Wireless authentication, the latest SSID the client was connected to
response_http404
object
Standard HTTP 404 not found error response
1 property
site_id
string
Unique identifier of a Mist site
nac_event_idp_username
string
If IDP is used, the username presented to the Identity Provider
nac_cert_serial
array
When certificate based authentication is used, the Serial from the certificates used for the specified duration
nac_event_ssid
string
SSIDs the client was connecting to
last_cert_subject
string
When certificate based authentication is used, the Subject from the latest certificate used
client_nac
object
NAC client authentication and access state
46 properties
edr_provider
string
EDR provider associated with the NAC client. enum: crowdstrike, sentinelone
nac_nacrule_name
array
Name of the NAC Rules used to authenticate the client for the specified duration
nac_cert_cn
array
When certificate based authentication is used, the CN from the certificates used for the specified duration
nac_client_last_status
string
Latest Authentication status of the client. enum: denied, permitted, sessionstarted, sessionstopped
The full machine-readable OpenAPI contract behind this narrative.
Other APIs Mist publishes across the network.
