Passive Mode, located in the Customer Settings section of the portal under the "Misc" tab, is a setting that allows you to test policy settings without impacting the end-user experience. When this setting is enabled, policy settings won't be enforced but they will appear in the traffic logs to show you what would have been blocked or allowed. This setting is useful when performing first-time deployments since you can see what websites users are accessing which can inform you on how to most effectively configure your policy for that customer.
Passive Mode can also be enabled at the group or endpoint level if you'd like to enable it only for a select number of endpoints within a customer. To this, click the edit icon next to a group or endpoint to open permission preferences.
Once open, simply click the "Passive Mode" checkbox (if doing this for a group, be sure to click the "Sync Permissions" checkbox so your preferences will be passed down to endpoints within that group) and click the "Save" button at the bottom.
