I favor default settings when it comes to device configurations. What I mean is that I try not to change any of the default settings on the system unless that change provides major benefit to the deployment. In general default settings are default for a reason, but as we all know there are some default settings that are set with such values due to backwards compatibility during upgrades.
I often get asked to provide sanity check on customer’s configuration of Secure Access related components. This includes ISE settings, Switch settings, and WLC settings. Of course there is no one size fits all but I am hoping the settings I list here will provide good guidance to provide stable Secure Access environment.
Six Cisco WLC settings for ISE integration
Ten Cisco IOS Switch settings for ISE integration
Five ISE configuration tips (Coming Soon!)