How does the NAP server check for policy compliance if the device requesting network access doesn't have an IP yet? I understand that the NAP server can authentic the user through the switch via dot1x (layer 2) but, what about policy compliance?
Thanks, Pat.