Shelve any plans for 802.1X on your wired network, mainly because the lack of group policy control makes it very difficult to manage in large-scale deployments.
Build a small 802.1X+EAP or WPA wireless network to familiarize yourself with the technology. Then plan for organization-wide deployment.
Evaluate whether domain isolation is appropriate for your environment; if so, begin planning for its deployment.
Consider other areas where IPsec can help: for instance, whenever a client is communicating sensitive or private information to a server, or when a front-end server is communicating such information to a back-end server, IPsec with encryption is entirely appropriate.
