Syed,
Can you give us a brief example of your current setup? Do you have PBR setup in order to force the users through the CAS during posture assessment, also do you have the static routes configured on the CAS that will route the traffic back to the clients? Also do you have the static routes configured so that if any response that needs to reach these clients are set to go through the trusted ip address of the CAS?
Thanks
Tarik Admani
If you can post a visio please do so, it will make it much easier to see what the path is for the clients and the CAS'