You can definitely do this with ISE - it just depends on how scalable you need it to be and what kind of visibility you need to have. I'll give an example - previous engineers at my workplace put APs and Printers on the same VLAN. I had since upgrade...

This could be an issue with DTLS Flow-Offload, which is a dedicated resource on the FTDs to support VPN connectivity. My FWs randomly rebooted a few months ago and, by the grace of God, I was SSHd into one of them and caught the messages. If you disa...