Hello Cisco community !
I'm currently working on Passive-ID integration on our ISE deployment.
As there is not a lot of documentation on it, I would like to have your feedback on this feature on large infrastructures.
- AD agent installed on every DC ? (Is it necessary to install the agent on each and every DC ? Some parts of the doc mention about a given agent being able to monitor 10 DCs... that's not clear to me)
- AD agent VS WMI ? I guess it's just a matter of "does your AD team allows you to install an agent on all the DC" ?
- Is there a significant increase of load on the DC, either using the AD agent or WMI integration ?
- Does all the PSNs (with Passive-ID probe enabled) need to be joined to each DC ? (kind of "full-mesh").
Thanks a lot for your answers and advices !
