I have been reviewing the pro's and con's of each type of implementation of ISE, whether it is monitoring, low-impact, or a closed enforcement mode. So outside of the usual "It depends on your requirements", one consideration that management usually asks is "What are other organizations in our industry doing?" This is one piece of the puzzle that I can't find much information about, even just anecdotal.
So my question for those of you who have experience implementing ISE in multiple customer engagements, is how would you say the landscape looks in the last couple years? Once monitoring mode is up and running, how many organizations actually go low-impact or closed mode? How many implement posturing as well? I know each industry has their own threat models and compliance requirements but I would like to be able to at least ballpark estimate for example that say 10% of customers are in full closed mode with posturing, 50% low impact, and the rest stayed in monitoring phase.
