Connect. Secure. Manage.
Access Manager Migration Services
Plan a move from existing RADIUS authentication to Cisco Access Manager, checking supported methods, policy gaps and rollback arrangements.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Access Manager migration services move a defined network-access workflow from its existing authentication arrangement to a supported Cisco Access Manager design. MCI Network Services plans the transition around endpoint readiness, policy equivalence and recovery access. The goal is not to reproduce every old rule mechanically; it is to preserve legitimate access, remove unnecessary exceptions where approved and leave a service the customer can operate confidently.
Defined trust
Make access boundaries explicit rather than relying on an assumed internal network.
Controlled access
Connect identity, policy and network enforcement to the services people actually use.
Evidence for change
Test the intended security outcome and retain useful operational records.
Inventory the existing authentication service
We establish which switches, wireless networks, endpoint groups and identity sources depend on the current system. The inventory includes hidden consumers such as specialist devices or administrative workflows that may share the same RADIUS infrastructure. Retiring a server used by more than the target SSID can create an outage outside the apparent project scope.
Existing rules are reviewed for purpose and ownership. Some may be obsolete, temporary or broader than the business requirement. We distinguish an approved simplification from a change that would alter access unexpectedly. The customer approves the intended policy before the migration plan treats it as equivalent to the old service.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Check that Access Manager fits the target scope
We verify the supported equipment, management modes, licences and authentication methods for the selected deployment. An existing ISE or third-party platform may provide capabilities that the proposed Access Manager workflow does not replace. Those functions are identified explicitly and retained or addressed through a separate design.
This assessment includes endpoint and identity behaviour, not just network-device support. Certificate mapping, user-group lookups, non-supplicant equipment and any required session changes are tested against the actual use case. A similar feature name is not evidence that the old and new services will make identical decisions.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Prepare client and trust changes
A change in authentication service can require new server trust, client profiles or credentials. We coordinate those prerequisites with the endpoint and identity teams before switching production access. The sequence must allow devices to obtain their new configuration while their existing connection still works.
We also plan for devices that are offline during the preparation period. Remote staff, spare laptops and rarely used equipment may return after the migration. Their recovery route should be defined rather than left to an emergency shared password. Certificate and profile changes are tracked separately from the network cutover so that each dependency has an accountable owner.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Pilot a complete access journey
The pilot includes first connection, ordinary reconnection, a rejected credential and the intended authorisation result. We compare the old and new behaviour using representative device types and sites. Where a group mapping or enforcement outcome differs, the discrepancy is resolved before the rollout expands.
Operational support is part of the pilot. The service desk should be able to identify a failed client profile, an identity lookup problem and a network-policy issue. We provide a short evidence checklist and escalation route. A migration is not ready for broad deployment when only the project engineer can explain why a device was refused.
Cut over in controlled groups
We agree the order of SSIDs, ports or locations and the conditions that allow the next group to proceed. Recovery access is preserved without leaving a broadly permissive permanent bypass. The change plan identifies which configuration will be restored if the new service fails and how that recovery can be performed safely.
Coexistence is designed deliberately. Old and new authentication systems may be available during transition, but policy ownership and client trust must remain clear. An endpoint should not receive different permissions unpredictably depending on which system answers first. We validate the supported selection behaviour rather than assuming two configured services provide a safe migration mechanism.
Retire the old dependencies properly
The old platform is removed only after its consumers have been accounted for and the agreed observation period is complete. We check remaining requests, scheduled integrations and exceptional equipment. A quiet dashboard is not sufficient evidence that no device still depends on a service used only occasionally.
Retirement includes credentials, certificates, firewall allowances and administrative permissions that are no longer required. Records needed for the customer's retention or investigation obligations are handled under its approved process. We do not delete historical evidence simply because the new authentication path is functioning.
Close with evidence and ownership
MCI supplies the migrated policy, endpoint prerequisites, completed test matrix and a record of any retained exceptions or unsupported cases. The handover states who maintains identity groups, certificates, Access Manager rules and enforcement devices. Our Access Manager policy design work can precede the migration where the current model needs clarification, ensuring that the transition ends with an intentional service rather than an unexplained copy of legacy complexity.
Technical references
- Cisco Access Manager deployment guide — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.