Security

I was at recent event and a discussion came up about clearpass deployments.

Some say for better proformance you should combine your clearpass service rules e.g. mac auth/social into one rule, others say you should split them out as it makes it easier to troubleshoot.

What is the community view?

My personal preference is to combine as much as possible in one service. But I make a distinction between wired, wireless and management services. 

And I use "dividers" to order the services in a more readable way.

Tim, this is true no clearpass is same, i have deployed multiple CPPMs of varing sizes and none are them same.

It does bring up the point, however there is no clear, best practice guide on deployments.