Thank you Kevin for your explanation. I notice Forescout NAC is in passive monitoring mode in your powerpoint.Do you mean all SD-Access VXLAN encapsulated packets have to be spanned to Forescout NAC? Or just do it at fabric border once? Considering ...