Hi Marcelothat is the whole idea not to use firepower.the existing setup is using windows AD, an ASA and the CDA.i am looking for a solution to replace cda with ISE which we are already using for VPN and more. So it will be windows AD, the same ASA a...

HelloWe are using ISE 2.7 and still have CDA for one specific AD group. thia CDA is configured as an agent on one of the ASA 5555's.we are trying to get rid of the CDA and I was thinking to use ISE's passive ID instead but Cisco told me I need firepo...

Thank you Timothy

Hello Timothythanks for your reply.I was reading on ISE-PIC and I saw -  "ISE PIC is a lightweight ISE version which focuses on Passive ID features."Would you know if the ISE version 2.0.0.306 (ISE-VM-K9) ADE-OS Version 2.3.0.17 should be able to rep...