...physical – permitting only authorised computers to gain access when connected to a network point on the wall. Ciscocalls it Network Admission Control (NAC) and Microsoft calls it Network Access Protection (NAP), but they both address...
http://www.cqrconsulting.com/studies/Corporate%20Firewall%20Fantasy.pdf