* Compliance is enforced by client provisioning and assessing the device posture at all endpoints.
* Enforcement capabilities such as Cisco TrustSec are provided using security group tags and security group access control lists (ACLs).
* The Terminal Access Controller Access-Control System security protocol provides device administration and handles remote authentication.