Preferably as soon as possible, before you deploy VENs. This gives the most time for app owners to be onboarded, to see the traffic data, and to become comfortable with Illumio before you move into enforcement mode.
Also, keep in mind that you don't need to deploy on all applications at the same time. You can start with only a few apps, or even just one app at a time.