ISE policies

Hello guys,

I think ISE is one of the most important devices in the network when it is configured in the correct way.

I have done many searches, I found that there are many practices regarding the deployment of the policies.

the problem is that there is no basic rule for configuring its policies, and that depending on what i found on the web.

my main question is that are there any basic best practices for ISE policies that will make my logs easier, and is there any ideas regarding the policies that may make my network more secure.

​

thank you all.