Yes, the Mac agent will prevent it from logging in from behind a NAT 
device, as long as you are using L3 strict mode.

Just so you know, NAC version 4.5 has the capability to do posture 
assessment for Macs.

Eric J. Kenny
Network Analyst
Marist College 
3399 North Rd.
Poughkeepsie, NY 12601
845.575.3820



From:
William Doyle <[email protected]>
To:
[email protected]
Date:
04/08/09 12:51 PM
Subject:
Mac nat control



Good Day,

To date we have not used the Mac agent. I know it is not capable of any
system checks, but does it convey the IP/mac of the client to at least 
block
logging in from behind a nat device?

Thanks

Reply via email to