Chapter 23. Closed Mode
As previously described in Chapter 20, “Deployment Phases,” Low-Impact Mode and Closed Mode are the end-state choices for your deployment. There is no specific best practice for which mode is better to deploy; it entirely depends on your organization and its specific needs.
One of the benefits of deploying in Closed Mode is the ability to easily assign VLANs to any authorization. Unlike Monitor and Low-Impact Modes, where devices are provided network access before the authentication request is sent to ISE, Closed Mode provides zero access before receiving a response from ISE or a timeout occurs. (See Chapter 18, “Setting Up a Distributed ISE Deployment,” for more on timeouts and High Availability.) Because no access was ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access