v0.23.0

What's Changed

• #169: trusted cert client_auth needs ise_auth; TrustSec push blast radius + matrix; current SGT in find_session by @dr-stutters in #173
• I72: guest service desk: reset password, notify, approve/deny (#50) by @dr-stutters in #174
• Bump stutters-mcp-core to v0.20.0; suite_segmentation_audit by @dr-stutters in #171
• I57 #167: conditions shared across network-access/device-admin (export once, single-create import, delete fallback) by @dr-stutters in #172
• Release 0.23.0 by @dr-stutters in #175

Full Changelog: v0.22.0...v0.23.0

v0.22.0

What's Changed

• SNMP scans: enabled state from top-level status; snmp_scan delete kind (#161) by @dr-stutters in #163
• Fix I88 create paths: RADIUS server key fields, name check, policy set isProxy (#158) by @dr-stutters in #162
• fix(I92): patch readiness polls through in-progress, ready needs isValid (#160) by @dr-stutters in #164
• ise_set_trusted_cert: CRL-only flags, stale-read confirm, dns_names dedupe (#159) by @dr-stutters in #165
• I91: pxGrid Direct connectors (NetBox / any REST CMDB as an ISE attribute source) (#100) by @dr-stutters in #166
• Release 0.22.0 by @dr-stutters in #168

Full Changelog: v0.21.0...v0.22.0

v0.21.0

What's Changed

• ise_update_policy_rule / ise_update_policy_set: no_change on a re-send (C71, #151) by @dr-stutters in #152
• [I58] ise_import_system_certificate and ise_set_trusted_cert (certificate depth) by @dr-stutters in #154
• [I92] ise_patch_readiness: patch / upgrade / rollback pre-check report by @dr-stutters in #155
• I61: profiler SNMP scans (ise_set_snmp_scan / ise_run_snmp_scan / ise_snmp_scan_history) by @dr-stutters in #156
• I88: RADIUS proxy: ise_set_external_radius_server and ise_set_radius_server_sequence by @dr-stutters in #153
• Release 0.21.0 by @dr-stutters in #157

Full Changelog: v0.20.0...v0.21.0

v0.20.0

What's Changed

• fix(egress): egress_cell 'ANY-ANY'/'ANY->ANY' hits the ANY-ANY blocker (#143) by @dr-stutters in #145
• C71: no_change instead of a token when an update changes nothing (#136) by @dr-stutters in #146
• I57: ise_set_condition / ise_delete_condition by @dr-stutters in #148
• [I87] Prompt ise_phased_8021x_rollout (monitor, low-impact, closed per NDG) by @dr-stutters in #149
• I89 follow-up: randomized_mac in endpoint_360 / list_endpoints, LSD in deployment_health by @dr-stutters in #147
• Release 0.20.0 by @dr-stutters in #150

Full Changelog: v0.19.0...v0.20.0

v0.19.0

What's Changed

• ise_create_backup: block a backup key ISE will refuse (#132) by @dr-stutters in #137
• fix(authz): send webRedirection.acl, not ACL (#130) by @dr-stutters in #135
• [I89] ise_get_mac_randomization / ise_set_mac_randomization (LSD settings) by @dr-stutters in #140
• I90: ise_list_virtual_networks / ise_list_sgt_vn_vlan (read) by @dr-stutters in #141
• fix(trustsec): catch-all SGACL is the rule, not a list entry; preview diff matches ISE (#131) by @dr-stutters in #138
• [I86 follow-up] ise_delete_object: egress_cell kind (#90) by @dr-stutters in #139
• Release 0.19.0 by @dr-stutters in #142

Full Changelog: v0.18.0...v0.19.0

v0.18.0

What's Changed

• Bump stutters-mcp-core to v0.19.0 by @dr-stutters in #126
• Unmask admin names in admins.change_password_pending (#124) by @dr-stutters in #127
• [I59] ise_endpoint_summary: endpoints by device type, profile, identity group, NDG by @dr-stutters in #133
• [I71 follow-up] Allowed protocols: ISE 3.5 nested settings, delete kind, export section by @dr-stutters in #129
• [I65] ise_unused_objects / ise_delete_object: SGTs in static IP-SGT mappings are used; GuestType_* built-in (#123) by @dr-stutters in #128
• Release 0.18.0 by @dr-stutters in #134

Full Changelog: v0.17.0...v0.18.0

v0.17.0

What's Changed

• ise_policy_explain: Device IP Address from a single-host NAD + IP operators (#113) by @dr-stutters in #115
• [I86] Egress cell MONITOR status + ise_set_default_egress_rule (ANY-ANY) by @dr-stutters in #118
• [I62] ise_set_repository / ise_delete_repository by @dr-stutters in #120
• I85: web redirection, interface templates and switch common tasks in authz profile tools by @dr-stutters in #116
• [I114] MAC-less RADIUS note: test aaa / device-admin logins leave no MnT record by @dr-stutters in #119
• [I56] ise_reset_hitcounts: reset policy hit counters by @dr-stutters in #121
• Release 0.17.0 by @dr-stutters in #125

Full Changelog: v0.16.0...v0.17.0

v0.16.0

What's Changed

• [I74] Admin access audit reads: admin users, groups, RBAC policies, admin access by @dr-stutters in #108
• I73: internal user lifecycle fields + ise_bulk_internal_users by @dr-stutters in #110
• [I65] ise_policy_audit + ise_unused_objects: policy hygiene audit by @dr-stutters in #109
• [I47] Prompt ise_deployment_health_review by @dr-stutters in #111
• [I66] ise_coa_bulk: CoA every live session in a scope by @dr-stutters in #107
• I75: MnT accounting totals + stale-session delete by @dr-stutters in #112
• [I71] ise_set_allowed_protocols with hardening presets by @dr-stutters in #106
• Release 0.16.0 by @dr-stutters in #117

Full Changelog: v0.15.0...v0.16.0

v0.15.0

What's Changed

• I45: prompt ise_onboard_nad by @dr-stutters in #103
• nad_radius_stats / recent_auth_failures: cover MAC-less RADIUS (#84) by @dr-stutters in #88
• [I84] ise_update_nad: remove_radius / remove_tacacs without passing a secret by @dr-stutters in #87
• Release 0.15.0 by @dr-stutters in #105

Full Changelog: v0.14.1...v0.15.0

v0.14.1

What's Changed

• I81: prompt ise_onboard_sdwan_edges; OUT-only vendor attributes in ise_list_dictionary_attributes by @dr-stutters in #83
• Release 0.14.1 by @dr-stutters in #85

Full Changelog: v0.14.0...v0.14.1