Re: NAC product

There is a product called Mirage CounterPoint that may be of interest to you. I haven't seen it but it is apparently agentless, identifies machines that violate policy and quarantines them. It is an applicance that plugs into 'access layer' switches which (I think) means you may have to deploy multiple appliances if the machines that you want to mitigate against aren't all going to connect to the rest of your network through a single switch .