Skip to content

Solution

Get ISE enforcing

You own Cisco ISE and it has never actually blocked anything.

What is going on

The deployment went in, monitor mode went on, and it stayed on. Licences renew every year against a control that authorises everything it sees. Nobody wants to be the person who flips the switch, and the person who built it has usually moved on.

What this is designed to achieve

A deployment that enforces, reached on a schedule, with each stage independently reversible and the help desk briefed before anything changes.

It starts with

A current-state assessment: what the existing deployment can already do, what it would deny today, and which exceptions are legitimate.

The phases it runs through

  1. Phase 1

    Discover

    What is actually on the network?

  2. Phase 3

    Prove

    What would have happened if this were enforcing?

  3. Phase 4

    Enforce

    Can we turn this on without an outage?

  4. Phase 5

    Sustain

    Will this still be working in a year?

How the method works

← All solutions