Cisco NAC: Strong in-line enforcement

NAC Appliance is mostly focused on authentication and end-point security checking; the tools for defining network access controls, especially when edge enforcement is being used, are very limited in scope. Some common features of NAC products, such as direct support for MAC-based authentication for VoIP devices or printers, are not built into the NAC Appliance. Instead, Cisco expects that you will use features built-in to their switches.

However, Cisco does sell their NAC Profiler, an OEM version of Great Bay Software's Beacon product line, which integrates tightly into the NAC Appliance, and helps to build exception lists for devices (such as VoIP phones or printers) to simplify NAC rollout.