Cisco Prime Attribute Reference
Focus
Focus
Device Security

Cisco Prime Attribute Reference

Table of Contents

Cisco Prime Attribute Reference

This reference lists the attributes that Device Security collects from Cisco Prime, their names as stored in Device Security, and the Device Security device fields they map to.
When Device Security integrates with Cisco Prime Infrastructure, it imports select device details to enrich the inventory. The attributes in this reference cover network device configuration and identification data.
The third-party attribute name in Device Security refers to the attribute name as it appears in the Assets Inventory table and in Query Engine. This follows the format of third-party-name.attribute-name. When viewing the attribute name in the Assets Inventory table column selector or on a Device Details page, where the third-party name can be found as a header for the attributes section, then the third-party name is removed from the attribute name.
For example, micrsoft_defender_xdr.macAddress would appear in the Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.

Device Attributes

Device Security collects device attributes from the Cisco Prime Infrastructure REST API device inventory endpoint. The following table lists each Cisco Prime attribute, its name as stored in Device Security, the Device Security device field it maps to (if applicable), and a description.
Cisco Prime Attribute
Device Security Attribute Name
Device Security Common Attribute*
Description
apIpAddress.address
cisco_prime.apIpAddress.address
ap_ip
IP address of the access point the device is connected to
apMacAddress
cisco_prime.apMacAddress
ap_mac
MAC address of the access point the device is connected to
apName
cisco_prime.apName
Access Point Name
Name of the access point the device is connected to
apSlotId
cisco_prime.apSlotId
Slot identifier of the access point radio used by the device
associationTime
cisco_prime.associationTime
Timestamp when the device associated with the wireless network
authenticationAlgorithm
cisco_prime.authenticationAlgorithm
wireless_auth_type
Authentication algorithm used by the deviceon the wireless network
clientAaaOverrideAclApplied
cisco_prime.clientAaaOverrideAclApplied
Indicates whether an AAA override ACL is applied to the client
clientAclApplied
cisco_prime.clientAclApplied
Indicates whether an ACL is applied to the client
clientApMode
cisco_prime.clientApMode
Operating mode of the access point serving the client
clientInterface
cisco_prime.clientInterface
Network interface the client is connected to
connectionType
cisco_prime.connectionType
Wired - Wireless
Connection type of the device (wired or wireless)
deviceIpAddress.address
cisco_prime.deviceIpAddress.address
Switch IP
IP address of the network device the client is connected to
deviceName
cisco_prime.deviceName
Hostname
Name of the device
deviceType
cisco_prime.deviceType
Device Type
Type classification of the device
eapType
cisco_prime.eapType
EAP (extensible authentication protocol) type used by the device
encryptionCypher
cisco_prime.encryptionCypher
wireless_encryption_cipher
Encryption cipher used by the deviceon the wireless network
firstSeenTime
cisco_prime.firstSeenTime
Timestamp when the device was first seen
hreapLocallyAuthenticated
cisco_prime.hreapLocallyAuthenticated
Indicates whether the client was locally authenticated by an H-REAP access point
ifIndex
cisco_prime.ifIndex
Interface index (ifIndex) for the device connection
ipAddress.address
cisco_prime.ipAddress.address
IP Address
IPv4 address of the device
location
cisco_prime.location
Location
Location of the device as configured
macAddress
MAC; id
MAC address of the device. Used as the primary device identifier.
mobilityStatus
cisco_prime.mobilityStatus
Mobility status of the wireless client
nacState
cisco_prime.nacState
NAC (Network admission control) state of the device
policyType
cisco_prime.policyType
Policy type applied to the device
policyTypeStatus
cisco_prime.policyTypeStatus
Status of the policy type applied to the device
postureStatus
cisco_prime.postureStatus
Posture compliance status of the device
protocol
cisco_prime.protocol
Wireless protocol used by the device
securityPolicyStatus
cisco_prime.securityPolicyStatus
Security policy compliance status of the device
speed
cisco_prime.speed
Connection speed of the device
ssid
cisco_prime.ssid
SSID
SSID the device is connected to
status
cisco_prime.status
Connection status of the device
updateTime
cisco_prime.updateTime
Timestamp of the last update for the device record
userName
cisco_prime.userName
Username associated with the device
vendor
cisco_prime.vendor
Vendor
Vendor or manufacturer of the device
vlan
cisco_prime.vlan
VLAN ID
VLAN the device is assigned to
webSecurity
cisco_prime.webSecurity
Indicates whether web security is enabled for the device
wepState
cisco_prime.wepState
WEP (wired equivalent privacy) state for the device
wgbMacAddress
cisco_prime.wgbMacAddress
MAC address of the workgroup bridge (WGB) the device is associated with
wgbStatus
cisco_prime.wgbStatus
Workgroup bridge (WGB) status for the device
wiredClientType
cisco_prime.wiredClientType
Type classification of the wired client
* Only some attributes map to a Device Security Common Attribute.