We have noticed that when we suspend a wireless client on our NAC Guest Server the user still remained authenticated. Our setup is a WCS, 5 controllers with one dedicated as a guest controller and a NAC Guest Server. If you suspend the user it does not disconnect them from the network it only prevents them from re-authenticating. In testing we were able to reboot a machine and stay authenticated. If we manually disable the client from the WCS the user is dropped but can re-authenticate from a differant MAC address or a AP that is on a different controller as the manually disable client is on a per controller basis. Is there a way to better tie the NAC guest server into the WCS so when you suspend the account it does both tasks on all controllers? Seems you have to do both or there is a way for the client to get back on.