Disabling Easy Connect in Cisco ISE but keep Passive Id integration

[Dinesh DG]

Hi support,

I have a few questions regarding Passive ID and Easy connect in cisco ISE 3.2

1. In Cisco ISE 3.2 we have a Passive ID integration, Also under the Authorization profiles, we have "passive id tracking" check box enabled. According to what I understand, this enables "Easy connect feature" in the ISE. If we are to disable "Easy connect" feature, the only thing we have to do is unticking "passive id tracking" check box under the authorization policy ?

2. will there be any impact to the existing  Passive ID integration with the AD by unticking "passive id tracking" under the autorization policy ?

appreciate your input on this ?

[Arne Bier]

What is your use case for Passive ID? If you leave it enabled on the Node Deployment config page, but untick the feature on the Authorization Profile, AFAIK, ISE will retain the integration, but you won't be able to perform authorization on those endpoints when there is an authentication event from your integrated AD/Infoblox etc.