Is it necessary to use the CA with NAC.
if we donot use it what is the impact on the users.
Can we deply without CA without any problems
Yes, it's possible to deploy NAC without CA. You can use the self-signed certs, or get a cert from a third party vendor (Verisign or Godaddy etc)