Cisco NAC with VPN Concentrators

[mmelbourne]

Looking at the deployment guidelines for NAC integration with VPN Concentrators:

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/412/cas/s_vpncon.html

Is it possible to define traffic which is exempt from NAC enforcement, for example traffic associated for LAN-to-LAN VPNs?

[didyap]

NAC enforcements do not work for traffic types. Following links may help you

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/412/cam/m_addSrv.html

http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/m_cca.html