I have use the feature navigator and have found out to use NAC2 features (such as posture validation of an client machine), we need to have either IOS (which mean Cat4006 SupII+ and above) or Cat6000 platform running Cat8.5.x version.
It's look like Cat4006 Sup2 (CatOS) is not capable to support NAC-2 (need to do posture validation). Can someone confirm this?