cisco ise agents

[zacht5476]

I deployed Cisco ISE in a testing environment, but we are unable to use switches and need to rely on the PIC Agent. Active Directory has been successfully integrated with Cisco ISE, but we are having trouble seeing all endpoints in Context Visibility. Can anyone advise on what might be missing?

[ahollifield]

Why do you want Passive ID at all? That's way less accurate than active authentication. 

[zacht5476]

The reason why is we do not own the switches and its a hassle to get the authorization to configure the switches. 

[ahollifield]

That is not the right approach. Why do you want ISE at all then? What's your use-case?

[Torbjørn]

If it is just a "hassle" to get authorization I think it is probably worth going down that route. As @ahollifield said, active authentication is _much_ better than Passive ID.