Yes, external connectivity to physical devices is supported for both virtual and bare metal CML installs. It is technically a little easier to deploy with bare metal as you don't need to worry about the vSwitch in between the physical devices and CML...

This is a great suggestion. I've found that switch configuration that worked without issue using ISE 2.6 no longer works with ISE 3.3 because TLS1.0 was not enabled. Enabling TLS1.0 via Administation > System > Settings > Security Settings allow the ...

I can assure you a VLAN interface is a routed interface on an ASA5505. This is evidenced by the fact that you apply IP addresses to the VLAN interface on that platform. This, by definition, makes the VLAN interface a routed/layer 3 interface.   Your ...

The VLAN interface is a routed interface on the ASA 5505, it just has multiple physical interfaces attached to it. So what you are describing is consistent across the two firewalls. DHCP is always enabled on a layer 3 interface.